mirror of
https://github.com/usebruno/bruno.git
synced 2026-06-15 03:41:28 +00:00
fix: update content security policy to allow inline scripts (#6139)
This commit is contained in:
committed by
GitHub
parent
38ba53be9f
commit
2b8da39bcf
@@ -60,6 +60,7 @@ const contentSecurityPolicy = [
|
||||
"connect-src 'self' https://*.posthog.com",
|
||||
"font-src 'self' https: data:;",
|
||||
"frame-src data:",
|
||||
'script-src \'self\' \'unsafe-inline\' data:',
|
||||
// this has been commented out to make oauth2 work
|
||||
// "form-action 'none'",
|
||||
// we make an exception and allow http for images so that
|
||||
|
||||
Reference in New Issue
Block a user