Merge pull request #3767 from backstage/bug/csp

Updating CSP for unsafe eval
2020-12-18 13:58:49 +01:00
parent 1adc0443ad 90f22cc2db
commit e3dc3e40cf
1 changed files with 1 additions and 1 deletions
@@ -52,7 +52,7 @@ const DEFAULT_CSP = {
  'frame-ancestors': ["'self'"],
  'img-src': ["'self'", 'data:'],
  'object-src': ["'none'"],
-  'script-src': ["'self'"],
+  'script-src': ["'self'", "'unsafe-eval'"],
  'script-src-attr': ["'none'"],
  'style-src': ["'self'", 'https:', "'unsafe-inline'"],
  'upgrade-insecure-requests': [] as string[],