fix: allow CSP inline styling

filebrowser · May 5, 2022 · 5da9d74 · 5da9d74
1 parent b14b911
commit 5da9d74
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/http/http.go b/http/http.go
@@ -27,7 +27,7 @@ func NewHandler(
 	r := mux.NewRouter()
 	r.Use(func(next http.Handler) http.Handler {
 		return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
-			w.Header().Set("Content-Security-Policy", `default-src 'self'`)
+			w.Header().Set("Content-Security-Policy", `default-src 'self'; style-src 'unsafe-inline';`)
 			next.ServeHTTP(w, r)
 		})
 	})