config: CSP: add unsafe-eval for scripts

2022-11-07 17:30:16 +00:00 · 2022-11-07 17:30:16 +00:00 · d0e2d7df37
parent 152f5c7983
commit d0e2d7df37
1 changed files with 1 additions and 1 deletions
--- a/config/initializers/content_security_policy.rb
+++ b/config/initializers/content_security_policy.rb
@ -31,7 +31,7 @@ if Rails.env.production?
    p.base_uri        :none
    p.default_src     :none
    p.frame_ancestors :none
-    p.script_src      :self, assets_host
+    p.script_src      :self, assets_host, :unsafe_eval
    p.font_src        :self, assets_host
    p.img_src         :self, :data, :blob, *data_hosts
    p.style_src       :self, assets_host