OTWO-7243 CSP policy fixes (#1787)

blackducksoftware · Apr 23, 2024 · eaa4b6a · eaa4b6a
1 parent ddeda7a
commit eaa4b6a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/config/initializers/content_security_policy.rb b/config/initializers/content_security_policy.rb
@@ -7,7 +7,7 @@
   policy.font_src :self, :https, :data
   policy.img_src :self, :https, :data
   policy.object_src :none
-  policy.script_src :self, :https, :unsafe_eval, *allowed_script_sources
+  policy.script_src :self, :https, :unsafe_inline, :unsafe_eval, *allowed_script_sources
   policy.style_src :self, :https, :unsafe_inline
   policy.report_uri '/csp-violation-report'
 end