# كيفية إصلاح مشكلة مع CSP

**URL:** <https://meta.discourse.org/t/how-to-fix-problem-with-csp/220523>\
**Category:** Product Support\
**Created:** [9 مارس 2022، 3:42م UTC](https://meta.discourse.org/t/how-to-fix-problem-with-csp/220523 "2022-03-09T15:42:06Z")\
**Posts on this page:** 1\
**Showing post:** 8

<div class="post-metadata">

**Author:** ![GreenOWL](https://avatars.discourse-cdn.com/v4/letter/g/a9a28c/32.png) [@GreenOWL](https://meta.discourse.org/u/GreenOWL)\
**Post date:** [9 مارس 2022، 6:53م UTC](https://meta.discourse.org/t/how-to-fix-problem-with-csp/220523/8 "2022-03-09T18:53:10Z")

</div>

كيف يمكنني تغيير توجيهات CSP الافتراضية في الرأس، لإضافة `img-src` دون استخدام علامة meta؟ لقد حاولت ذلك في Rails، ولكن لم يتغير شيء:

```plaintext
Rails.application.config.action_dispatch.default_headers.merge!({'Content-Security-Policy' => "upgrade-insecure-requests; base-uri 'self'; object-src 'none'; script-src https://mydomain.com/logs/ https://mydomain.com/sidekiq/ https://mydomain.com/mini-profiler-resources/ https://mydomain.com/assets/ https://mydomain.com/brotli_asset/ https://mydomain.com/extra-locales/ https://mydomain.com/highlight-js/ https://mydomain.com/javascripts/ https://mydomain.com/plugins/ https://mydomain.com/theme-javascripts/ https://mydomain.com/svg-sprite/; worker-src 'self' https://mydomain.com/assets/ https://mydomain.com/brotli_asset/ https://mydomain.com/javascripts/ https://mydomain.com/plugins/; frame-ancestors 'self'; manifest-src 'self'; img-src data: https://mydomain.com https://imgur.com"})

```

---

_[View the full topic](https://meta.discourse.org/t/how-to-fix-problem-with-csp/220523)._