fix: update content security policy to allow inline scripts (#6139)

This commit is contained in:
Siddharth Gelera (reaper)
2025-12-03 19:57:10 +05:30
committed by GitHub
parent 38ba53be9f
commit 2b8da39bcf

View File

@@ -60,6 +60,7 @@ const contentSecurityPolicy = [
"connect-src 'self' https://*.posthog.com",
"font-src 'self' https: data:;",
"frame-src data:",
'script-src \'self\' \'unsafe-inline\' data:',
// this has been commented out to make oauth2 work
// "form-action 'none'",
// we make an exception and allow http for images so that