Merge pull request #15864 from backstage/blam/update-csp-docs

Updating `api-docs` readme for `csp` usage
2023-01-20 13:07:38 +01:00
parent 39e26bf8a3 60996f8aba
commit 70ee8b13a1
2 changed files with 6 additions and 0 deletions
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-api-docs': patch
+---
+
+Updating the readme with better `csp` instructions
@@ -164,6 +164,7 @@ This also may require you to adjust `Content Security Policy` header settings of
 ```yaml
 script-src:
  - "'self'"
+  - "'unsafe-eval'" # this is required for scaffolder usage, and ajv validation.
  - "'sha256-GeDavzSZ8O71Jggf/pQkKbt52dfZkrdNMQ3e+Ox+AkI='" # oauth2-redirect.html
 ```