maverick/flex-template-web
1
0
Fork 0
mirror of https://github.com/kingomarnajjar/flex-template-web.git synced 2026-07-26 06:47:17 +10:00
Code Issues Projects Releases Packages Wiki Activity Actions

Allow eval in scripts

Browse source
This commit is contained in:
Kimmo Puputti 2018-03-16 14:32:51 +02:00
parent b79e5aeaab
commit 4dccbd51ec
1 changed files with 4 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
server/csp.js
View file

@ -18,7 +18,8 @@ const sentryClientEnabled = !!process.env.REACT_APP_PUBLIC_SENTRY_DSN;
*/
module.exports = (reportUri, enforceSsl, reportOnly) => {
const self = "'self'";
const inline = "'unsafe-inline'";
const unsafeInline = "'unsafe-inline'";
const unsafeEval = "'unsafe-eval'";
const data = 'data:';
const sharetribeApi = process.env.REACT_APP_SHARETRIBE_SDK_BASE_URL;
const sharetribeAssets = 'https://assets-sharetribecom.sharetribe.com';
@ -38,9 +39,9 @@ module.exports = (reportUri, enforceSsl, reportOnly) => {
const stripeApi = 'https://api.stripe.com';
const sentryApi = 'https://sentry.io/api/';
const scriptSrc = [self, inline, data, googleMaps, stripeJs];
const scriptSrc = [self, unsafeInline, unsafeEval, data, googleMaps, stripeJs];
const styleSrc = [self, inline, googleFonts];
const styleSrc = [self, unsafeInline, googleFonts];
const imgSrc = [
self,