fix: add the unsafe-eval as poc

bcgov · Feb 19, 2025 · be366b0 · be366b0
1 parent a3eb795
commit be366b0
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/app/app.js b/app/app.js
@@ -35,6 +35,7 @@ app.use((_req, res, next) => {
     "default-src 'self'; " +
       "connect-src 'self' https://dev.loginproxy.gov.bc.ca; " +
       "font-src 'self' https://fonts.gstatic.com; " +
+      "script-src 'self' 'unsafe-eval'; " +
       "style-src 'self' 'unsafe-inline' https://fonts.googleapis.com"
   );
   next();