diff --git a/SciPost_v1/settings/base.py b/SciPost_v1/settings/base.py index 343f6b5f72866b3ad745a487b948426f8ff9a29d..c9b70414d0a7577bd59ecec34073b27d5296b818 100644 --- a/SciPost_v1/settings/base.py +++ b/SciPost_v1/settings/base.py @@ -200,7 +200,7 @@ CSP_FONT_SRC = ("'self'", 'data:', 'fonts.gstatic.com', 'cdnjs.cloudflare.com', CSP_FRAME_SRC = ('www.google.com', 'player.vimeo.com') CSP_IMG_SRC = ("'self'", 'data:', 'ajax.googleapis.com', 'assets.crossref.org', 'licensebuttons.net', 'crossmark-cdn.crossref.org') -CSP_SCRIPT_SRC = ("'self'", 'data:', "'unsafe-inline'", 'ajax.googleapis.com', +CSP_SCRIPT_SRC = ("'self'", 'eval:', "'unsafe-inline'", 'ajax.googleapis.com', 'cdnjs.cloudflare.com', 'crossmark-cdn.crossref.org', 'www.recaptcha.net', 'www.gstatic.com', 'code.jquery.com')