From: Dessalines <tyhou13@gmx.com>
Date: Tue, 1 Dec 2020 18:37:15 +0000 (-0600)
Subject: Remove inline javascript. Fixes #83
X-Git-Url: http://these/git/%24%7B%60data:application/static/git-logo.png?a=commitdiff_plain;h=fc2044580dcd0a9aa3869daf87d1ee2bf2782140;p=lemmy-ui.git

Remove inline javascript. Fixes #83
---

diff --git a/src/server/index.tsx b/src/server/index.tsx
index b2016cf..4c52aec 100644
--- a/src/server/index.tsx
+++ b/src/server/index.tsx
@@ -87,7 +87,7 @@ server.get('/*', async (req, res) => {
   const cspHtml = (
     <meta
       http-equiv="Content-Security-Policy"
-      content="default-src 'none'; connect-src 'self'; frame-src *; img-src *; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'"
+      content="default-src 'none'; connect-src 'self'; frame-src *; img-src *; script-src 'self'; style-src 'self'"
     />
   );