From 89322603600b399d6b77692b590cbf00948a6f4c Mon Sep 17 00:00:00 2001 From: Erik Michelson Date: Sun, 23 Aug 2020 01:29:53 +0200 Subject: Add missing unsafe-inline CSP directive Dropbox loads an external script that adds inline javascript. Therefore, this addition is needed when enabling dropbox support. Signed-off-by: Erik Michelson --- lib/csp.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/csp.js b/lib/csp.js index 5c9c7b3d..24399436 100644 --- a/lib/csp.js +++ b/lib/csp.js @@ -33,7 +33,7 @@ var googleAnalyticsDirectives = { } var dropboxDirectives = { - scriptSrc: ['https://www.dropbox.com'] + scriptSrc: ['https://www.dropbox.com', '\'unsafe-inline\''] } CspStrategy.computeDirectives = function () { -- cgit v1.2.3