[#314]: make the content security very lax because treebeard depends …

…on that
GermanZero-de · Oct 26, 2023 · 16ee52b · 16ee52b
1 parent 6bbd11a
commit 16ee52b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/config/nginx/conf.d/nginx.conf b/config/nginx/conf.d/nginx.conf
@@ -11,7 +11,7 @@ server {
 
     add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload";
     add_header Cache-Control "no-store";
-    add_header Content-Security-Policy "default-src 'self'; style-src 'self' 'unsafe-inline';img-src 'self' data:;";
+    add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:;";
 
     location / {
         # pass requests for dynamic content to gunicorn