Fix GraphiQL in prod as well

Closes #708 Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2021-08-12 16:21:42 +02:00 · 2021-08-12 16:21:42 +02:00 · 4df1eab2b2
parent f964afa465
commit 4df1eab2b2
1 changed files with 2 additions and 2 deletions
--- a/lib/web/router.ex
+++ b/lib/web/router.ex
@ -15,8 +15,8 @@ defmodule Mobilizon.Web.Router do
    plug(Mobilizon.Web.Plugs.SetLocalePlug)

    plug(Mobilizon.Web.Plugs.HTTPSecurityPlug,
-      script_src: ["cdn.jsdelivr.net"],
-      style_src: ["cdn.jsdelivr.net"],
+      script_src: ["cdn.jsdelivr.net 'sha256-zkCwvTwqwJMew/8TKv7bTLh94XRSNBvT/o/NZCuf5Kc='"],
+      style_src: ["cdn.jsdelivr.net 'unsafe-inline'"],
      font_src: ["cdn.jsdelivr.net"]
    )
  end