Add unsafe inline and blob to CSP

tektoncd · Apr 21, 2020 · fd3841c · fd3841c
1 parent 7bbdda6
commit fd3841c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/webpack.common.js b/webpack.common.js
@@ -17,7 +17,7 @@ const contentSecurityPolicy = {
   development:
     "default-src 'none'; img-src 'self'; script-src 'self' 'unsafe-eval'; style-src blob:; connect-src 'self'; font-src 'self' https://fonts.gstatic.com;",
   production:
-    "default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; connect-src 'self'; font-src 'self' https://fonts.gstatic.com;"
+    "default-src 'none'; img-src 'self'; script-src 'self' blob:; style-src 'self' 'unsafe-inline'; connect-src 'self'; font-src 'self' https://fonts.gstatic.com;"
 };
 
 module.exports = ({ mode }) => ({