mirror of
https://github.com/usebruno/bruno.git
synced 2026-06-27 14:44:07 +00:00
fix: update content security policy to remove unsafe-inline (#6305)
This commit is contained in:
@@ -65,7 +65,7 @@ const contentSecurityPolicy = [
|
||||
'connect-src \'self\' https://*.posthog.com',
|
||||
'font-src \'self\' https: data:;',
|
||||
'frame-src data:',
|
||||
'script-src \'self\' \'unsafe-inline\' data:',
|
||||
'script-src \'self\' data:',
|
||||
// this has been commented out to make oauth2 work
|
||||
// "form-action 'none'",
|
||||
// we make an exception and allow http for images so that
|
||||
|
||||
Reference in New Issue
Block a user