Allow OAuth 2 authorizations to redirect to anywhere

tomhughes · May 18, 2021 · b96f386 · b96f386
1 parent 5868be1
commit b96f386
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/app/controllers/oauth2_authorizations_controller.rb b/app/controllers/oauth2_authorizations_controller.rb
@@ -5,4 +5,10 @@ class Oauth2AuthorizationsController < Doorkeeper::AuthorizationsController
   before_action :set_locale
 
   authorize_resource :class => false
+
+  def new
+    override_content_security_policy_directives(:form_action => []) if Settings.csp_enforce || Settings.key?(:csp_report_url)
+
+    super
+  end
 end