Add unsafe-inline for script-src and added object-src

mdn / infra

(Deprecated) MDN Web Docs Infrastructure scripts and configuration

Mozilla Public License 2.0

52 stars 32 forks source link

Add unsafe-inline for script-src and added object-src #477

Closed limed closed 2 years ago

limed commented 3 years ago

This is to fix request here https://github.com/mdn/insights/pull/65

limed commented 3 years ago

The original request that we add 'unsafe-eval' for script-src which i feel a little uncomfortable doing so I am just adding 'unsafe-inline' since we do have inline scripts