From 0c3af8bf848a8a4de9a5adc70247ea2c69b5e7e8 Mon Sep 17 00:00:00 2001 From: Himanshu Mishra Date: Mon, 7 Jun 2021 16:18:06 +0200 Subject: [PATCH] update changeset to document how to keep the existing behavior Signed-off-by: Himanshu Mishra --- .changeset/hip-trees-heal.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/.changeset/hip-trees-heal.md b/.changeset/hip-trees-heal.md index 2fc9633b98..6c79567187 100644 --- a/.changeset/hip-trees-heal.md +++ b/.changeset/hip-trees-heal.md @@ -11,3 +11,11 @@ backend: csp: - upgrade-insecure-requests: false ``` + +But if you want to keep the existing behavior of `upgrade-insecure-requests` Content-Security-Policy being enabled, make the following change in your `app-config.yaml`. You can read more the CSP here https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/upgrade-insecure-requests + +```diff +backend: ++ csp: ++ upgrade-insecure-requests: [] +```