[openstreetmap/openstreetmap-website] Add blob to CSP frame-src. Fixes #2582 (#2583)

[Tom Hughes]

I think we need to understand the consequence of this before we add it as global policy - what exactly does that allow?

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/pull/2583#issuecomment-611502417
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20200409/92829b6b/attachment.htm>