From 3abec7910f4b0af6d691eda111e200ae9188688e Mon Sep 17 00:00:00 2001 From: Fabio Manganiello Date: Tue, 30 Jun 2020 12:33:08 +0200 Subject: [PATCH] unsafe-eval is actually needed in CSP otherwise custom user scripts cannot be evaluated --- src/manifest.json | 1 + 1 file changed, 1 insertion(+) diff --git a/src/manifest.json b/src/manifest.json index d7bfb0f..fc40781 100644 --- a/src/manifest.json +++ b/src/manifest.json @@ -2,6 +2,7 @@ "name": "platypush", "description": "Web extension for interacting with one or more Platypush instances via browser", "version": "0.1.2", + "content_security_policy": "script-src 'self' 'unsafe-eval'; object-src 'self'", "manifest_version": 2, "icons": { "16": "icons/icon-16.png",