From db5de99417cd4407210122f26098d8c9807e054d Mon Sep 17 00:00:00 2001
From: Henk Verlinde <henk@ventizo.com>
Date: Wed, 15 Apr 2020 20:10:16 +0200
Subject: [PATCH] Update CSP+

---
 layouts/index.headers | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/layouts/index.headers b/layouts/index.headers
index 89d794a..6af401e 100644
--- a/layouts/index.headers
+++ b/layouts/index.headers
@@ -2,7 +2,7 @@
   Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
   X-Content-Type-Options: nosniff
   X-XSS-Protection: 1; mode=block
-  Content-Security-Policy: default-src 'self'; img-src 'self' data:; object-src 'none'
+  Content-Security-Policy:  default-src 'none'; img-src 'self' data:; script-src 'self' 'unsafe-eval'; style-src 'self'
   X-Frame-Options: SAMEORIGIN
   Referrer-Policy: strict-origin
   Feature-Policy: geolocation 'self'