OP-16541: config change contentSecurityPolicy.

kirangodishala · Aug 8, 2022 · c214856 · c214856
1 parent 131832d
commit c214856
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/gate-web/config/gate.yml b/gate-web/config/gate.yml
@@ -121,6 +121,7 @@ spring:
   profiles: googleOAuth
 
 security:
+  contentSecurityPolicy: "object-src 'none'; script-src 'unsafe-eval' 'unsafe-inline' https: http:;"
   oauth2:
     client:
       # Set these values in your own config file (e.g. spinnaker-local.yml or gate-googleOAuth.yml).