Add ‘unsafe-inline’ to headers to fix rendering svgs

2018-12-19 11:08:39 -05:00 · 2018-12-19 11:08:39 -05:00 · acb405d799
commit acb405d799
parent 39d89c4d1b
1 changed files with 2 additions and 2 deletions
--- a/atst/app.py
+++ b/atst/app.py
@ -105,11 +105,11 @@ def set_default_headers(app):  # pragma: no cover
        if ENV == "dev":
            response.headers[
                "Content-Security-Policy"
-            ] = "default-src 'self' 'unsafe-eval'; connect-src *"
+            ] = "default-src 'self' 'unsafe-eval' 'unsafe-inline'; connect-src *"
        else:
            response.headers[
                "Content-Security-Policy"
-            ] = "default-src 'self' 'unsafe-eval'"
+            ] = "default-src 'self' 'unsafe-eval' 'unsafe-inline'"

        return response