Allows h5p scripts to run inline

parlemonde · Feb 13, 2024 · 9fc340b · 9fc340b
1 parent 97d7858
commit 9fc340b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/server/utils/server.ts b/server/utils/server.ts
@@ -53,7 +53,7 @@ export function getDefaultDirectives(): { [directiveName: string]: Iterable<stri
     'connect-src': ["'self'", 'http:', 'https:', 'data:', 'blob:'],
     'img-src': ["'self'", 'http:', 'https:', 'data:', 'blob:'],
     'object-src': ["'none'"],
-    'script-src': ["'self'", 'https:', 'blob:'],
+    'script-src': ["'self'", 'https:', 'blob:', "'unsafe-inline'"],
     'script-src-attr': ["'none'"],
     'style-src': ["'self'", "'unsafe-inline'", 'https:'],
     'media-src': ['*', 'data:', 'https:', 'blob:'],