fix: update content security policy to remove unsafe-inline (#6305)

This commit is contained in:
Sid
2025-12-04 12:40:52 +05:30
committed by GitHub
parent 72ce6cadeb
commit a9ce97fb1b

View File

@@ -65,7 +65,7 @@ const contentSecurityPolicy = [
'connect-src \'self\' https://*.posthog.com',
'font-src \'self\' https: data:;',
'frame-src data:',
'script-src \'self\' \'unsafe-inline\' data:',
'script-src \'self\' data:',
// this has been commented out to make oauth2 work
// "form-action 'none'",
// we make an exception and allow http for images so that