CSP error since migration to 6.2.0

[fariouche]

Hello,
I finally got the time to upgrade my server that was running v5 (with livewire_enabled set to false because of issues at the time)
Now I'm using v6.2.0, removed the LIVEWIRE_ENABLED line from my .env file and I see only a black page.

Using firefox and the dev console, I see an error about CSP blocking a function call.

Looking at the CSP of the script, I have:
default-src 'self' http: https: data: blob: 'unsafe-inline'; frame-ancestors 'self';

And the error is telling me that unsafe-eval is missing

artisan migrate was executed with no problem, so I think I missed something somewhere (not sure this is important, but I'm behind nginx and using https)

[fariouche]

Sorry, I forgot that I override the CSP in my nginx config globally by default. Removing it makes it work. I will now test the v6 at last!

Thanks: