From acb405d79992319af03ed28dd747142a04d7d608 Mon Sep 17 00:00:00 2001 From: George Drummond Date: Wed, 19 Dec 2018 11:08:39 -0500 Subject: [PATCH] =?UTF-8?q?Add=20=E2=80=98unsafe-inline=E2=80=99=20to=20he?= =?UTF-8?q?aders=20to=20fix=20rendering=20svgs?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- atst/app.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/atst/app.py b/atst/app.py index 84348e68..1edb59b1 100644 --- a/atst/app.py +++ b/atst/app.py @@ -105,11 +105,11 @@ def set_default_headers(app): # pragma: no cover if ENV == "dev": response.headers[ "Content-Security-Policy" - ] = "default-src 'self' 'unsafe-eval'; connect-src *" + ] = "default-src 'self' 'unsafe-eval' 'unsafe-inline'; connect-src *" else: response.headers[ "Content-Security-Policy" - ] = "default-src 'self' 'unsafe-eval'" + ] = "default-src 'self' 'unsafe-eval' 'unsafe-inline'" return response