erp5_web_js_style: change csp to allow inline style

bad, but we have many inline style web pages which take time to change(by who?)

erp5_web_js_style: change csp to allow inline style
bad, but we have many inline style web pages which take time to change(by who?)
63c15940 · Xiaowu Zhang · 210e2e08 · 63c15940
Commit 63c15940 authored Feb 11, 2022 by Xiaowu Zhang
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

bt5/erp5_web_js_style/SkinTemplateItem/portal_skins/erp5_web_js_style_ui/view_main.zpt ...plateItem/portal_skins/erp5_web_js_style_ui/view_main.zpt +1 -1

No files found.
--- a/bt5/erp5_web_js_style/SkinTemplateItem/portal_skins/erp5_web_js_style_ui/view_main.zpt
+++ b/bt5/erp5_web_js_style/SkinTemplateItem/portal_skins/erp5_web_js_style_ui/view_main.zpt
@@ -27,7 +27,7 @@
      <tal:block metal:use-macro="global_definitions_macros/header_definitions" />
 <html tal:attributes="lang current_language">
  <head>
-  <meta http-equiv="Content-Security-Policy" content="default-src 'self'; frame-src 'self' https://www.youtube-nocookie.com/embed/" />
+  <meta http-equiv="Content-Security-Policy" content="default-src 'self'; style-src 'self' 'unsafe-inline'; frame-src 'self' https://www.youtube-nocookie.com/embed/" />
  <meta name="referrer" content="same-origin">
  <meta http-equiv="Feature-Policy" content="accelerometer 'none'; ambient-light-sensor 'none'; autoplay: 'none'; battery: 'none'; camera: 'none'; display-capture: 'none'; document-domain: 'none'; encrypted-media: 'none'; geolocation: 'none'; gyroscope: 'none'; magnetometer: 'none'; microphone: 'none'; payment: 'none'; usb: 'none'" />
  <base tal:attributes="href python: '%s/' % web_section.absolute_url()" />