Update with unsafe inline

TACC · Jul 13, 2023 · 00f369e · 00f369e
1 parent db8bc6b
commit 00f369e
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 2 deletions.
diff --git a/server/portal/settings/settings.py b/server/portal/settings/settings.py
@@ -740,10 +740,11 @@
     "cdnjs.cloudflare.com",
 	"*.googleapis.com",
     "*.gstatic.com",
+    "'unsafe-inline'",
 ]
 CSP_SCRIPT_SRC = [
     "'self'",
-    'strict-dynamic'
+    "'unsafe-inline'",
 ]
 
 CSP_INCLUDE_NONCE_IN = ['script-src', 'style-src']

diff --git a/server/portal/settings/settings_default.py b/server/portal/settings/settings_default.py
@@ -6,7 +6,7 @@
 # DJANGO SETTINGS COMMON
 ########################
 
-_DEBUG = True
+_DEBUG = False
 
 # Namespace for portal
 _PORTAL_NAMESPACE = 'CEP'