summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorBenjamin Brahmer <info@b-brahmer.de>2023-06-17 12:03:03 +0200
committerBenjamin Brahmer <info@b-brahmer.de>2023-06-18 14:41:15 +0200
commit9b29d84b47c78f33efcd87184c9791e06a322841 (patch)
tree380438159c9c96a43357ffc0f2cf59e5b43f3f54
parent45cbfad2676dd75c3beb05d0658dfb4198625daf (diff)
allowEvalScript set to true
Signed-off-by: Benjamin Brahmer <info@b-brahmer.de>
-rw-r--r--CHANGELOG.md1
-rw-r--r--lib/Controller/PageController.php1
2 files changed, 2 insertions, 0 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5adb77891..d5ca6c138 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,7 @@ The format is mostly based on [Keep a Changelog](https://keepachangelog.com/en/1
# Unreleased
## [22.x.x]
### Changed
+- allowEvalScript set to true (#2262)
### Fixed
diff --git a/lib/Controller/PageController.php b/lib/Controller/PageController.php
index abdd3f2f7..41d0e7f89 100644
--- a/lib/Controller/PageController.php
+++ b/lib/Controller/PageController.php
@@ -96,6 +96,7 @@ class PageController extends Controller
$csp->addAllowedImageDomain('*')
->addAllowedMediaDomain('*')
->addAllowedConnectDomain('*')// chrome breaks on audio elements
+ ->allowEvalScript(true)
->addAllowedFrameDomain('https://youtube.com')
->addAllowedFrameDomain('https://www.youtube.com')
->addAllowedFrameDomain('https://player.vimeo.com')