From 90f22cc2db1b2301b9a134ae87f69e11ecf14510 Mon Sep 17 00:00:00 2001 From: blam Date: Thu, 17 Dec 2020 01:29:51 +0100 Subject: [PATCH] chore: when serving with app-backend, the frontend needs unsafe-eval for the patterns in react-jsonschema-form or ajv validation --- packages/backend-common/src/service/lib/ServiceBuilderImpl.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packages/backend-common/src/service/lib/ServiceBuilderImpl.ts b/packages/backend-common/src/service/lib/ServiceBuilderImpl.ts index 778e25f71c..46bf23beef 100644 --- a/packages/backend-common/src/service/lib/ServiceBuilderImpl.ts +++ b/packages/backend-common/src/service/lib/ServiceBuilderImpl.ts @@ -52,7 +52,7 @@ const DEFAULT_CSP = { 'frame-ancestors': ["'self'"], 'img-src': ["'self'", 'data:'], 'object-src': ["'none'"], - 'script-src': ["'self'"], + 'script-src': ["'self'", "'unsafe-eval'"], 'script-src-attr': ["'none'"], 'style-src': ["'self'", 'https:', "'unsafe-inline'"], 'upgrade-insecure-requests': [] as string[],