diff options
| author | Joas Schilling <coding@schilljs.com> | 2018-10-15 17:05:10 +0300 |
|---|---|---|
| committer | Joas Schilling <coding@schilljs.com> | 2018-11-15 16:47:23 +0300 |
| commit | 8920f36b4e5a6041fef0b6ac8cd89654df7ae232 (patch) | |
| tree | 01e859b6a50cb3aa834966eb86325239f52bcf37 | |
| parent | 66882c8fbcf17fcf9c7c37a71c74c1cb53745b12 (diff) | |
Fix CSP also for guests
Signed-off-by: Joas Schilling <coding@schilljs.com>
| -rw-r--r-- | lib/Controller/PageController.php | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/lib/Controller/PageController.php b/lib/Controller/PageController.php index 604432596..b7beb407d 100644 --- a/lib/Controller/PageController.php +++ b/lib/Controller/PageController.php @@ -227,6 +227,7 @@ class PageController extends Controller { $csp = new ContentSecurityPolicy(); $csp->addAllowedConnectDomain('*'); $csp->addAllowedMediaDomain('blob:'); + $csp->allowEvalScript(true); $response->setContentSecurityPolicy($csp); return $response; } |