fix(csp): tighten Content Security Policy by removing 'unsafe-eval' f…

…rom script-src
emqx · Dec 2, 2024 · 08d6221 · 08d6221
1 parent f515491
commit 08d6221
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/apps/desktop/src/renderer/index.html b/apps/desktop/src/renderer/index.html
@@ -7,7 +7,7 @@
     <!-- https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP -->
     <meta
       http-equiv="Content-Security-Policy"
-      content="default-src 'self'; script-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data:"
+      content="default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:"
     />
   </head>