diff --git a/studio-server/src/main/java/com/coremedia/labs/plugins/feedbackhub/acrolinx/AcrolinxCSPSettings.java b/studio-server/src/main/java/com/coremedia/labs/plugins/feedbackhub/acrolinx/AcrolinxCSPSettings.java index 2ae2f21..14a2d1b 100644 --- a/studio-server/src/main/java/com/coremedia/labs/plugins/feedbackhub/acrolinx/AcrolinxCSPSettings.java +++ b/studio-server/src/main/java/com/coremedia/labs/plugins/feedbackhub/acrolinx/AcrolinxCSPSettings.java @@ -15,14 +15,13 @@ public class AcrolinxCSPSettings implements CSPSettings { @Override public List getScriptSrc() { - return Arrays.asList("'unsafe-eval'", "'self'", "data:", "http:", "https:", + return Arrays.asList("'unsafe-eval'", "'unsafe-inline'", "'self'", "data:", "http:", "https:", + "https://unpkg.com/", "app.eu.pendo.io", "pendo-eu-static.storage.googleapis.com", "cdn.eu.pendo.io", "pendo-eu-static-5227652489019392.storage.googleapis.com", - "data.eu.pendo.io", - "'sha256-uvjFzlIG+c9vTvlPjd4XprgNwAHtbxCBrl7kg8AOP3A='", - "'sha256-czdU7T58bnMmn54YmKphBkPUShRlMF5Naf66fSAEVF8='"); + "data.eu.pendo.io"); } @Override