Remove inline javascript. Fixes #83

diff --git a/src/server/index.tsx b/src/server/index.tsx
index b2016cf50c1f4dbc0031fa31bc0f32f5dce73e7f..4c52aeca16b16adcde0d82398c1eb89fdb4c285a 100644 (file)
--- a/src/server/index.tsx
+++ b/src/server/index.tsx
@@ -87,7 +87,7 @@ server.get('/*', async (req, res) => {
   const cspHtml = (
     <meta
       http-equiv="Content-Security-Policy"
-      content="default-src 'none'; connect-src 'self'; frame-src *; img-src *; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'"
+      content="default-src 'none'; connect-src 'self'; frame-src *; img-src *; script-src 'self'; style-src 'self'"
     />
   );