Add quotes to 'unsafe-inline', add 'unsafe-eval'

ome · Jan 23, 2024 · 689325a · 689325a
1 parent 787aa01
commit 689325a
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/omeroweb/settings.py b/omeroweb/settings.py
@@ -1181,7 +1181,7 @@ def check_session_engine(s):
     ],
     "omero.web.csp_script_src": [
         "CSP_SCRIPT_SRC",
-        '["\'self\'", "unsafe-inline"]',
+        '["\'self\'", "\'unsafe-inline\'", "\'unsafe-eval\'"]',
         json.loads,
         "Set the CSP script-src directive",
     ],
@@ -1193,7 +1193,7 @@ def check_session_engine(s):
     ],
     "omero.web.csp_style_src": [
         "CSP_STYLE_SRC",
-        '["\'self\'", "unsafe-inline"]',
+        '["\'self\'", "\'unsafe-inline\'"]',
         json.loads,
         "Set the CSP style-src directive",
     ],