nginx: temporarily use unsafe-eval in CSP for Isso

Quite a bummer!
vincentbernat · Apr 17, 2018 · 743c471 · 743c471
1 parent 7c80a65
commit 743c471
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/layout/nginx.j2 b/layout/nginx.j2
@@ -6,7 +6,8 @@ add_header    "X-Content-Type-Options" "nosniff";
 add_header    "Strict-Transport-Security" "max-age=31557600; includeSubDomains; preload";
 add_header    "Content-Security-Policy" "{% filter striptags %}
    default-src 'self' blob:;
-   script-src  'self' blob:
+   script-src  'self' blob: 
+               'unsafe-eval'
                {{ media_url('js/') }};
    object-src  'self' {{ media_url('images/') }};
    img-src     'self' data: