Do not set CSP for safari 5

lib/secure_headers.rb

@@ -114,7 +114,7 @@ module SecureHeaders
 
     def broken_implementation?(browser)
       #IOS 5 sometimes refuses to load external resources even when whitelisted with CSP
-      return browser.ios5?
+      return browser.ios5? || (browser.safari? && browser.version == 5)
     end
   end
 end

spec/lib/secure_headers_spec.rb

@@ -24,7 +24,10 @@ describe SecureHeaders do
     :chrome => 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5',
     :ie => 'Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/5.0)',
     :opera => 'Opera/9.80 (Windows NT 6.1; U; es-ES) Presto/2.9.181 Version/12.00',
-    :ios5 => "Mozilla/5.0 (iPhone; CPU iPhone OS 5_0 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Version/5.1 Mobile/9A334 Safari/7534.48.3"
+    :ios5 => "Mozilla/5.0 (iPhone; CPU iPhone OS 5_0 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Version/5.1 Mobile/9A334 Safari/7534.48.3",
+    :ios6 => "Mozilla/5.0 (iPhone; CPU iPhone OS 614 like Mac OS X) AppleWebKit/536.26 (KHTML like Gecko) Version/6.0 Mobile/10B350 Safari/8536.25",
+    :safari5 => "Mozilla/5.0 (iPad; CPU OS 5_1 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko ) Version/5.1 Mobile/9B176 Safari/7534.48.3",
+    :safari6 => "Mozilla/5.0 (Macintosh; Intel Mac OS X 1084) AppleWebKit/536.30.1 (KHTML like Gecko) Version/6.0.5 Safari/536.30.1"
   }
 
   def should_assign_header name, value
@@ -81,8 +84,8 @@ describe SecureHeaders do
           5
         when :opera
           4
-        when :ios5
-          3 # csp is disabled for ios5
+        when :ios5, :safari5
+          3 # csp breaks these browsers
         else
           4
         end