allow inline/eval script if debug mode is turned on

nextcloud · Nov 8, 2023 · 2c68e19 · 2c68e19
1 parent 70aed07
commit 2c68e19
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/lib/Controller/PageController.php b/lib/Controller/PageController.php
@@ -102,6 +102,12 @@ public function index(): TemplateResponse
             ->addAllowedFrameDomain('https://www.player.vimeo.com')
             ->addAllowedFrameDomain('https://vk.com')
             ->addAllowedFrameDomain('https://www.vk.com');
+
+        if($this->settings->getSystemValue('debug')) {
+            $csp->allowInlineScript(true);
+            $csp->allowEvalScript(true);
+        }
+
         $response->setContentSecurityPolicy($csp);
 
         return $response;