From 76e4a24da10a51afeaa3a650709f43bbe46520a9 Mon Sep 17 00:00:00 2001 From: Esther Date: Sun, 3 Jan 2021 23:33:59 +0000 Subject: [PATCH] Fined another tiny CSP bug --- app.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app.js b/app.js index 13886ed..d948084 100644 --- a/app.js +++ b/app.js @@ -31,7 +31,7 @@ app.use( helmet.contentSecurityPolicy({ directives: { defaultSrc: ["'self'"], - scriptSrc: ["'self'", "'unsafe-inline'", "https://hcaptcha.com", "https://*.hcaptcha.com", "https://cdn.ravenjs.com/"], + scriptSrc: ["'self'", "'unsafe-inline'", "'unsafe-eval'", "https://hcaptcha.com", "https://*.hcaptcha.com", "https://cdn.ravenjs.com/"], imgSrc: ["'self'", "https://blog.pastel.codes", "https://static.ghost.org", "https://secure.gravatar.com"], styleSrc: ["'self'", "'unsafe-inline'", "https://hcaptcha.com", "https://*.hcaptcha.com"], fontSrc: ["'self'", "data:"],