From 7381077851be09280058a277facca1faf95bfd8a Mon Sep 17 00:00:00 2001
From: Henk Verlinde <henk@ventizo.com>
Date: Wed, 15 Apr 2020 15:59:29 +0200
Subject: [PATCH] Update CSP

---
 layouts/index.headers | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/layouts/index.headers b/layouts/index.headers
index 3fa5600..d7d1a8b 100644
--- a/layouts/index.headers
+++ b/layouts/index.headers
@@ -2,7 +2,7 @@
   Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
   X-Content-Type-Options: nosniff
   X-XSS-Protection: 1; mode=block
-  Content-Security-Policy: default-src 'self'; img-src 'self' data:; object-src 'none'
+  Content-Security-Policy: default-src 'none'; img-src 'self' data:; script-src 'self' 'unsafe-eval'; style-src 'self'
   X-Frame-Options: SAMEORIGIN
   Referrer-Policy: strict-origin
   Feature-Policy: geolocation 'self'