config: allow loading external script

Co-Authored-by: Peter Weber <peter.weber@rero.ch> Co-Authored-by: Bertrand Zuchuat <bertrand.zuchuat@rero.ch>
rero · Feb 19, 2020 · b1aa2fe · b1aa2fe
1 parent 0533292
commit b1aa2fe
Showing 1 changed file with 10 additions and 3 deletions.
diff --git a/rero_ils/config.py b/rero_ils/config.py
@@ -293,11 +293,18 @@ def _(x):
     'strict_transport_security_include_subdomains': True,
     'content_security_policy': {
         'default-src': ['*'],
-        'img-src': ["'self'", 'data:'],
-        'style-src': ['*', "'unsafe-inline'"],
+        'img-src': [
+            '*',
+            "'self'",
+            'data:'
+        ],
+        'style-src': [
+            '*',
+            "'unsafe-inline'"
+        ],
         'script-src': [
             "'self'",
-            "'unsafe-eval'",
+            "'unsafe-inline'",
             # '*.rero.ch',
             'https://www.googletagmanager.com',
             'https://www.google-analytics.com',