feat(app-vite): tighten CSP for BEX (manifest v2)

by removing 'unsafe-eval'
quasarframework · Aug 26, 2024 · 441ed78 · 441ed78
1 parent 62e6e78
commit 441ed78
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/app-vite/templates/bex/default/manifest-v2/manifest.json b/app-vite/templates/bex/default/manifest-v2/manifest.json
@@ -36,5 +36,5 @@
     "<all_urls>"
   ],
 
-  "content_security_policy": "script-src 'self' 'unsafe-eval'; object-src 'self';"
+  "content_security_policy": "script-src 'self'; object-src 'self';"
 }
diff --git a/app-vite/templates/bex/ts/manifest-v2/manifest.json b/app-vite/templates/bex/ts/manifest-v2/manifest.json
@@ -36,5 +36,5 @@
     "<all_urls>"
   ],
 
-  "content_security_policy": "script-src 'self' 'unsafe-eval'; object-src 'self';"
+  "content_security_policy": "script-src 'self'; object-src 'self';"
 }