From d0e2d7df37050922ca87fffd29ab23b7a19c3a16 Mon Sep 17 00:00:00 2001 From: Ariadne Conill Date: Mon, 7 Nov 2022 17:30:16 +0000 Subject: [PATCH] config: CSP: add unsafe-eval for scripts --- config/initializers/content_security_policy.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/initializers/content_security_policy.rb b/config/initializers/content_security_policy.rb index 21f782b9c54..8212cb19f53 100644 --- a/config/initializers/content_security_policy.rb +++ b/config/initializers/content_security_policy.rb @@ -31,7 +31,7 @@ if Rails.env.production? p.base_uri :none p.default_src :none p.frame_ancestors :none - p.script_src :self, assets_host + p.script_src :self, assets_host, :unsafe_eval p.font_src :self, assets_host p.img_src :self, :data, :blob, *data_hosts p.style_src :self, assets_host