fixed CSP settings

CoreMedia · Apr 17, 2023 · 3c7e9d7 · 3c7e9d7
1 parent 9b691a7
commit 3c7e9d7
Showing 1 changed file with 3 additions and 4 deletions.
diff --git a/...er/src/main/java/com/coremedia/labs/plugins/feedbackhub/acrolinx/AcrolinxCSPSettings.java b/...er/src/main/java/com/coremedia/labs/plugins/feedbackhub/acrolinx/AcrolinxCSPSettings.java
@@ -15,14 +15,13 @@ public class AcrolinxCSPSettings implements CSPSettings {
 
   @Override
   public List<String> getScriptSrc() {
-    return Arrays.asList("'unsafe-eval'", "'self'", "data:", "http:", "https:",
+    return Arrays.asList("'unsafe-eval'", "'unsafe-inline'", "'self'", "data:", "http:", "https:",
+            "https://unpkg.com/",
             "app.eu.pendo.io",
             "pendo-eu-static.storage.googleapis.com",
             "cdn.eu.pendo.io",
             "pendo-eu-static-5227652489019392.storage.googleapis.com",
-            "data.eu.pendo.io",
-            "'sha256-uvjFzlIG+c9vTvlPjd4XprgNwAHtbxCBrl7kg8AOP3A='",
-            "'sha256-czdU7T58bnMmn54YmKphBkPUShRlMF5Naf66fSAEVF8='");
+            "data.eu.pendo.io");
   }
 
   @Override