From 76e60a6aaa2d929d2493a6c5c7c949b4c323e279 Mon Sep 17 00:00:00 2001 From: Neil Matatall Date: Sun, 17 Jul 2016 22:56:56 -0600 Subject: [PATCH] add docs about child/frame-src handling --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index d8402844..832ee8f9 100644 --- a/README.md +++ b/README.md @@ -55,7 +55,7 @@ SecureHeaders::Configuration.default do |config| default_src: %w(https: 'self'), base_uri: %w('self'), block_all_mixed_content: true, # see http://www.w3.org/TR/mixed-content/ - child_src: %w('self'), + child_src: %w('self'), # if child-src isn't supported, the value for frame-src will be set. connect_src: %w(wss:), font_src: %w('self' data:), form_action: %w('self' github.com),