feat(app-webpack): tighten CSP for BEX (manifest v2)

by removing 'unsafe-eval'
quasarframework · Aug 26, 2024 · 62e6e78 · 62e6e78
1 parent dd96775
commit 62e6e78
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/app-webpack/templates/bex/default/manifest-v2/manifest.json b/app-webpack/templates/bex/default/manifest-v2/manifest.json
@@ -36,5 +36,5 @@
     "<all_urls>"
   ],
 
-  "content_security_policy": "script-src 'self' 'unsafe-eval'; object-src 'self';"
+  "content_security_policy": "script-src 'self'; object-src 'self';"
 }
diff --git a/app-webpack/templates/bex/ts/manifest-v2/manifest.json b/app-webpack/templates/bex/ts/manifest-v2/manifest.json
@@ -36,5 +36,5 @@
     "<all_urls>"
   ],
 
-  "content_security_policy": "script-src 'self' 'unsafe-eval'; object-src 'self';"
+  "content_security_policy": "script-src 'self'; object-src 'self';"
 }