beenull/ente
1
0
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity

added unsafe inline as fallback to hash for script-src

Browse source
This commit is contained in:
Abhinav 2021-12-02 13:18:44 +05:30
parent 25ef3a8a44
commit 14094d1ad0
1 changed files with 7 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
src/pages/_document.tsx
View file

@ -61,19 +61,19 @@ export default class MyDocument extends Document {
}
render() {
let csp = {
...BASE_CSP_DIRECTIVES,
'script-src': `'self' ${cspHashOf(
const scriptDirective = {
'script-src': `'unsafe-inline' 'self' ${cspHashOf(
NextScript.getInlineScriptSource(this.props)
)}`,
};
let csp = {
...BASE_CSP_DIRECTIVES,
...scriptDirective,
};
if (process.env.NODE_ENV !== 'production') {
csp = {
...BASE_CSP_DIRECTIVES,
...csp,
...DEV_CSP_DIRECTIVES,
'script-src': `'unsafe-eval' 'self' ${cspHashOf(
NextScript.getInlineScriptSource(this.props)
)}`,
};
}
return (