diff --git a/deploy/nginx/nginx.conf b/deploy/nginx/nginx.conf index d320a553fcc997056f791004c69f6bb13acac4b0..f03caa6c47540978cce5b62b62adf966053500e9 100644 --- a/deploy/nginx/nginx.conf +++ b/deploy/nginx/nginx.conf @@ -61,7 +61,7 @@ http { add_header X-Frame-Options DENY; add_header X-Content-Type-Options nosniff; add_header Strict-Transport-Security "max-age=31536000; includeSubDomains"; - add_header Content-Security-Policy "script-src 'self' 'unsafe-inline'; object-src 'none'; frame-src 'none'; "; + add_header Content-Security-Policy "script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'none'; frame-src 'none'; "; add_header Cache-Control "no-cache,no-store,must-revalidate"; add_header Pragma no-cache; add_header Expires 0;