Merge pull request #716 from sharetribe/csp-script-data

Allow data URLs in scripts
This commit is contained in:
Kimmo Puputti 2018-02-23 13:14:26 +02:00 committed by GitHub
commit 003a3fb542
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -37,7 +37,7 @@ module.exports = (reportUri, enforceSsl, reportOnly) => {
const stripeApi = 'https://api.stripe.com/';
const sentryApi = 'https://sentry.io/api/';
const scriptSrc = [self, inline, googleMaps, stripeJs];
const scriptSrc = [self, inline, data, googleMaps, stripeJs];
const styleSrc = [self, inline, googleFonts];