This commit is contained in:
the-djmaze 2023-02-14 20:12:16 +01:00
parent 9dd917894d
commit d58cb75e53

View file

@ -9,7 +9,7 @@ class CSP
{
public
$base = ["'self'"],
$default = ["'self'"],
$default = ["'self'", 'data:'],
// Knockout.js requires eval() for observable binding purposes
// Safari < 15.4 does not support strict-dynamic
// $script = ["'strict-dynamic'", "'unsafe-eval'"],