diff options
| author | Thomas Citharel <github@tcit.fr> | 2020-12-12 23:11:42 +0300 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2020-12-12 23:11:42 +0300 |
| commit | 71cf92697cf1632803e9e57629504871cad549da (patch) | |
| tree | bd58d19ac21f20042d54566ea8f9eb50c8d94412 /lib/public/AppFramework | |
| parent | 5644795813e99e344ded8af93900500142964108 (diff) | |
Update comment to reflect current CSP policy
JS unsafe-eval was removed a long time ago in https://github.com/nextcloud/server/pull/11028
Diffstat (limited to 'lib/public/AppFramework')
| -rw-r--r-- | lib/public/AppFramework/Http/ContentSecurityPolicy.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/public/AppFramework/Http/ContentSecurityPolicy.php b/lib/public/AppFramework/Http/ContentSecurityPolicy.php index 3a9ab8f8c15..20263769630 100644 --- a/lib/public/AppFramework/Http/ContentSecurityPolicy.php +++ b/lib/public/AppFramework/Http/ContentSecurityPolicy.php @@ -36,7 +36,7 @@ namespace OCP\AppFramework\Http; * notice that Nextcloud ships already with sensible defaults and those policies * should require no modification at all for most use-cases. * - * This class allows unsafe-eval of javascript and unsafe-inline of CSS. + * This class allows unsafe-inline of CSS. * * @since 8.1.0 */ |