Merge branch 'fix/csp' into develop

weni-ai · Jun 3, 2024 · e871f3f · e871f3f
2 parents 061d07d + e63848a
commit e871f3f
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/docker/nginx/nginx.conf b/docker/nginx/nginx.conf
@@ -25,8 +25,8 @@ http {
 
   server {
     set $CSP_DEFAULT "default-src 'self'";
-    set $CSP_SCRIPT "script-src 'self' 'unsafe-eval' 'unsafe-inline' 'unsafe-hashes'";
-    set $CSP_SCRIPT_ELEM "script-src-elem 'self' 'unsafe-inline' 'unsafe-hashes'";
+    set $CSP_SCRIPT "script-src 'self' 'unsafe-eval' 'unsafe-inline' 'unsafe-hashes' *";
+    set $CSP_SCRIPT_ELEM "script-src-elem 'self' 'unsafe-inline' 'unsafe-hashes' *";
     set $CSP_FRAME_ANCESTORS "frame-ancestors 'self' https://*.weni.ai";
     set $CSP_STYLE "style-src 'self' 'unsafe-hashes' 'unsafe-inline' fonts.googleapis.com";
     set $CSP_FONT "font-src 'self' data: fonts.gstatic.com";