th: config: CSP: add unsafe-eval for scripts

2022-11-07 17:30:16 +00:00 · 2022-11-07 17:30:16 +00:00 · f28a74d014
parent 5b92324e54
commit f28a74d014
1 changed files with 1 additions and 1 deletions
--- a/config/initializers/content_security_policy.rb
+++ b/config/initializers/content_security_policy.rb
@ -31,7 +31,7 @@ if Rails.env.production?
    p.base_uri        :none
    p.default_src     :none
    p.frame_ancestors :none
-    p.script_src      :self, assets_host
+    p.script_src      :self, assets_host, :unsafe_eval
    p.font_src        :self, assets_host
    p.img_src         :self, :data, :blob, *data_hosts
    p.style_src       :self, assets_host