Remove inline javascript. Fixes #83

This commit is contained in:
Dessalines 2020-12-01 12:37:15 -06:00
parent 7d3c9b2568
commit fc2044580d

View file

@ -87,7 +87,7 @@ server.get('/*', async (req, res) => {
const cspHtml = (
<meta
http-equiv="Content-Security-Policy"
content="default-src 'none'; connect-src 'self'; frame-src *; img-src *; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'"
content="default-src 'none'; connect-src 'self'; frame-src *; img-src *; script-src 'self'; style-src 'self'"
/>
);