We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 0e794a8 commit 001e008Copy full SHA for 001e008
@app/server/src/middleware/installHelmet.ts
@@ -38,9 +38,11 @@ export default async function installHelmet(app: Express) {
38
}
39
// Dev needs 'unsafe-eval' due to
40
// https://github.com/vercel/next.js/issues/14221
41
+ // Ruru needs 'unsafe-inline'
42
options.contentSecurityPolicy.directives!["script-src"] = [
43
"'self'",
44
"'unsafe-eval'",
45
+ "'unsafe-inline'",
46
];
47
48
if (isDevOrTest || !!process.env.ENABLE_GRAPHIQL) {
0 commit comments