chore: when serving with app-backend, the frontend needs unsafe-eval for the patterns in react-jsonschema-form or ajv validation

2020-12-17 01:29:51 +01:00
parent eec95ab02b
commit 90f22cc2db
1 changed files with 1 additions and 1 deletions
@@ -52,7 +52,7 @@ const DEFAULT_CSP = {
  'frame-ancestors': ["'self'"],
  'img-src': ["'self'", 'data:'],
  'object-src': ["'none'"],
-  'script-src': ["'self'"],
+  'script-src': ["'self'", "'unsafe-eval'"],
  'script-src-attr': ["'none'"],
  'style-src': ["'self'", 'https:', "'unsafe-inline'"],
  'upgrade-insecure-requests': [] as string[],