Give up and unsafe eval

carols10cents · carols10cents · commit 93ad0d8362a7 · 2017-08-12T09:20:55.000-04:00
diff --git a/src/http.rs b/src/http.rs
@@ -106,7 +106,8 @@ impl Middleware for SecurityHeadersMiddleware {
                 vec![
                     "default-src 'self'; \
                       connect-src 'self' https://docs.rs; \
-                      script-src 'self' https://www.google-analytics.com https://www.google.com; \
+                      script-src 'self' 'unsafe-eval' \
+                                 https://www.google-analytics.com https://www.google.com; \
                       style-src 'self' https://www.google.com https://ajax.googleapis.com; \
                       img-src *; \
                       object-src 'none'"
