<commit_before>::SecureHeaders::Configuration.configure do |config|
  config.hsts = false
  config.x_frame_options = "SAMEORIGIN"
  config.x_content_type_options = "nosniff"
  config.x_xss_protection = {:value => 1, :mode => "block"}
  config.x_download_options = "noopen"
  config.x_permitted_cross_domain_policies = "none"
  config.csp = {
    :default_src => "'self' static.hoshinplan.com *.userreport.com api.mixpanel.com",
    :enforce => true,
    :font_src => "'self' fonts.gstatic.com static.hoshinplan.com staticdoc.hoshinplan.com",
    :frame_src => "'self' accounts.google.com docs.google.com *.userreport.com",
    :style_src => "'self' 'unsafe-inline' fonts.googleapis.com static.hoshinplan.com staticdoc.hoshinplan.com",
    :script_src => "'self' 'unsafe-eval' 'unsafe-inline' static.hoshinplan.com staticdoc.hoshinplan.com apis.google.com www.dropbox.com app.box.com *.userreport.com settingsbucket.s3.amazonaws.com www.google-analytics.com ajax.cloudflare.com cdn.mxpnl.com",
    :img_src => "'self' doc.hoshinplan.com static.hoshinplan.com staticdoc.hoshinplan.com hoshinplan.s3-eu-west-1.amazonaws.com shield.sitelock.com cdn.mxpnl.com stats.g.doubleclick.net www.google-analytics.com *.userreport.com sqs.us-east-1.amazonaws.com",
    :report_uri => "/uri_dir_reports"
  }
  config.hpkp = false
end<commit_msg>Add data: to font-src<commit_after>::SecureHeaders::Configuration.configure do |config|
  config.hsts = false
  config.x_frame_options = "SAMEORIGIN"
  config.x_content_type_options = "nosniff"
  config.x_xss_protection = {:value => 1, :mode => "block"}
  config.x_download_options = "noopen"
  config.x_permitted_cross_domain_policies = "none"
  config.csp = {
    :default_src => "'self' static.hoshinplan.com *.userreport.com api.mixpanel.com",
    :enforce => true,
    :font_src => "'self' fonts.gstatic.com static.hoshinplan.com staticdoc.hoshinplan.com data:",
    :frame_src => "'self' accounts.google.com docs.google.com *.userreport.com",
    :style_src => "'self' 'unsafe-inline' fonts.googleapis.com static.hoshinplan.com staticdoc.hoshinplan.com",
    :script_src => "'self' 'unsafe-eval' 'unsafe-inline' static.hoshinplan.com staticdoc.hoshinplan.com apis.google.com www.dropbox.com app.box.com *.userreport.com settingsbucket.s3.amazonaws.com www.google-analytics.com ajax.cloudflare.com cdn.mxpnl.com",
    :img_src => "'self' doc.hoshinplan.com static.hoshinplan.com staticdoc.hoshinplan.com hoshinplan.s3-eu-west-1.amazonaws.com shield.sitelock.com cdn.mxpnl.com stats.g.doubleclick.net www.google-analytics.com *.userreport.com sqs.us-east-1.amazonaws.com",
    :report_uri => "/uri_dir_reports"
  }
  config.hpkp = false
end
{'fraction_non_alphanumeric': 0.14547494390426327, 'fraction_numerical': 0.0037397157816005983, 'mean_word_length': 4.740343347639485, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 23, 'https://': 0, 'lorem ipsum': 0, 'www.': 6, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 2, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '1672089', 'n_tokens_mistral': 1002, 'n_tokens_neox': 975, 'n_words': 149}