From 4aa6845672b027f6445fd4e85231218ca6ebf26f Mon Sep 17 00:00:00 2001 From: "Collin M. Barrett" Date: Sun, 24 Jan 2021 12:33:25 -0600 Subject: [PATCH] =?UTF-8?q?feat(web):=20=E2=9C=A8=20disable=20csp=20unsafe?= =?UTF-8?q?-inline?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- reverse-proxy/conf.d/default.conf | 2 +- web/Dockerfile | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/reverse-proxy/conf.d/default.conf b/reverse-proxy/conf.d/default.conf index dd027ebb2..7508a904c 100644 --- a/reverse-proxy/conf.d/default.conf +++ b/reverse-proxy/conf.d/default.conf @@ -29,7 +29,7 @@ server { location / { proxy_pass http://web:80; include location-includes/*; - add_header Content-Security-Policy "default-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'none'; script-src 'self' 'unsafe-inline'; connect-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline';" always; + add_header Content-Security-Policy "default-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'none'; script-src 'self'; connect-src 'self'; img-src 'self' data:; style-src 'self';" always; } } diff --git a/web/Dockerfile b/web/Dockerfile index c6e235407..92e20dfe7 100644 --- a/web/Dockerfile +++ b/web/Dockerfile @@ -16,7 +16,7 @@ RUN npm ci --only=production # build COPY . ./ -RUN npm run build +RUN INLINE_RUNTIME_CHUNK=false npm run build # final FROM base as final