krikkert/habitica
1
0
Fork 0
mirror of https://github.com/HabitRPG/habitica.git synced 2025-12-16 06:07:21 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix(CSP): unsafe-eval in default-src

Browse Source
This commit is contained in:
Kalista Payne
2025-12-12 16:56:24 -06:00
parent f51f0a0c93
commit 023d9886c8
1 changed files with 1 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
website/server/middlewares/index.js
View File

@@ -69,6 +69,7 @@ export default function attachMiddlewares (app, server) {
contentSecurityPolicy: { contentSecurityPolicy: {
directives: { directives: {
defaultSrc: [ defaultSrc: [
'\'unsafe-eval\'',
'*.amazonaws.com', '*.amazonaws.com',
'*.habitica.com', '*.habitica.com',
'cloudfront.loggly.com', 'cloudfront.loggly.com',
@@ -77,9 +78,6 @@ export default function attachMiddlewares (app, server) {
'static-na.payments-amazon.com', 'static-na.payments-amazon.com',
], ],
imgSrc: '*', imgSrc: '*',
scriptSrc: [
'\'unsafe-eval\'',
],
upgradeInsecureRequests: IS_PROD ? [] : null, upgradeInsecureRequests: IS_PROD ? [] : null,
}, },
}, },