Setting style-src using array results in junk output about ember-cli-content-security-policy HOT 4 CLOSED

This seems to be fixed. Wasn't able to reproduce in latest release as well as in current master.

diff --git a/tests/dummy/config/environment.js b/tests/dummy/config/environment.js
index a480928..f2bbac7 100644
--- a/tests/dummy/config/environment.js
+++ b/tests/dummy/config/environment.js
@@ -47,5 +47,10 @@ module.exports = function(environment) {
 
   }
 
+  ENV.contentSecurityPolicy = {
+    'default-src': "'none'",
+    'style-src': ["https://fonts.googleapis.com"],
+  }
+
   return ENV;
 };

$ ember csp-headers
# Content Security Policy Header Configuration
#
# for Apache: Header set Content-Security-Policy-Report-Only "..."
# for Nginx : add_header Content-Security-Policy-Report-Only "...";

default-src 'none'; style-src https://fonts.googleapis.com; script-src 'self'; font-src 'self'; connect-src 'self'; img-src 'self'; media-src 'self';

from ember-cli-content-security-policy.

Rolling back to 0.5.0 also exhibits the same broken behaviour, adding s e l f ' u n a - i; to the end of the style-src meta tag

from ember-cli-content-security-policy.

Work around for now is to set stye-src to a space delimitated string of the elements:

ENV.contentSecurityPolicy {
            'default-src': "'none'",
            'style-src': "'self' 'unsafe-inline' https://fonts.googleapis.com",
}

from ember-cli-content-security-policy.

Thanks @jelhan! I'm closing this. Happy to re-open if this is still an issue.

from ember-cli-content-security-policy.