Add unsafe-eval to CSP

Toniq-Labs · Jul 24, 2024 · d8fa52c · d8fa52c
1 parent f90d9ca
commit d8fa52c
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 3 deletions.
diff --git a/packages/demo/configs/vite.config.ts b/packages/demo/configs/vite.config.ts
@@ -9,7 +9,8 @@ const extraDevServerConfig = {
     host: '127.0.0.1',
     port: 5283,
     headers: {
-        'Content-Security-Policy': "default-src 'unsafe-inline' localhost:5284 'self' blob: data:",
+        'Content-Security-Policy':
+            "default-src 'unsafe-inline' 'unsafe-eval' localhost:5284 'self' blob: data:",
     },
 } as const;
 

diff --git a/packages/tests/configs/vite.config.ts b/packages/tests/configs/vite.config.ts
@@ -29,7 +29,7 @@ export default defineConfig({forGitHubPages: false}, async (baseConfig) => {
         port: 5283,
         headers: {
             'Content-Security-Policy':
-                "default-src 'unsafe-inline' localhost:5284 'self' blob: data:",
+                "default-src 'unsafe-inline' 'unsafe-eval' localhost:5284 'self' blob: data:",
         },
     } as const;
 

diff --git a/packages/toniq-nft-frame/configs/vite.config.ts b/packages/toniq-nft-frame/configs/vite.config.ts
@@ -34,7 +34,8 @@ export default defineConfig({forGitHubPages: false}, async (baseConfig) => {
               }
             : {
                   headers: {
-                      'Content-Security-Policy': "default-src 'unsafe-inline' 'self' blob: data:",
+                      'Content-Security-Policy':
+                          "default-src 'unsafe-inline' 'unsafe-eval' 'self' blob: data:",
                   },
               }),
     } as const;