Removed unsafe-eval from CORS policy

microsoft · Jan 22, 2021 · e0720eb · e0720eb
1 parent dade51e
commit e0720eb
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/packages/devtools-network-console/public/index.html b/packages/devtools-network-console/public/index.html
@@ -13,7 +13,7 @@
         default-src 'self' blob:;
         style-src 'self' 'unsafe-inline' https://devtools.azureedge.net;
         font-src 'self' https://static2.sharepointonline.com https://spoprod-a.akamaihd.net https://devtools.azureedge.net;
-        script-src 'self' 'unsafe-inline' 'unsafe-eval' https://devtools.azureedge.net;
+        script-src 'self' 'unsafe-inline' https://devtools.azureedge.net;
         img-src 'self' data:;
         worker-src 'self' https://devtools.azureedge.net data:;
       "