CSP: add Mendeley to script-src

f07777b3 · Jean-Sébastien Caux · 25fd4446 · f07777b3
Commit f07777b3 authored 5 years ago by Jean-Sébastien Caux
--- a/SciPost_v1/settings/base.py
+++ b/SciPost_v1/settings/base.py
@@ -204,7 +204,8 @@ CSP_SCRIPT_SRC = ("'self'", 'scipost.org', "'report-sample'",
                  'cdnjs.cloudflare.com',
                  'crossmark-cdn.crossref.org',
                  'www.recaptcha.net',
-                  'code.jquery.com')
+                  'code.jquery.com',
+                  'static.mendeley.com')
 CSP_STYLE_SRC = ("'self'", 'scipost.org', "'report-sample'",
                 'crossmark-cdn.crossref.org',
                 "'unsafe-inline'", 'ajax.googleapis.com', 'code.jquery.com',