summaryrefslogtreecommitdiffstats
path: root/lib
diff options
context:
space:
mode:
authorBenjamin Brahmer <info@b-brahmer.de>2023-10-24 12:25:11 +0200
committerBenjamin Brahmer <info@b-brahmer.de>2023-10-24 13:22:44 +0200
commit1632f5b0e2fbfdaa5be31d12240c089383b5af11 (patch)
tree379c332a4d6ece11861ea0052ef692d7e56d2f71 /lib
parentf53159bb88e95f14379e6b76f824b696cf39647c (diff)
adjust dependabot, remove allowEvalScript()
Signed-off-by: Benjamin Brahmer <info@b-brahmer.de>
Diffstat (limited to 'lib')
-rw-r--r--lib/Controller/PageController.php1
1 files changed, 0 insertions, 1 deletions
diff --git a/lib/Controller/PageController.php b/lib/Controller/PageController.php
index 41d0e7f89..abdd3f2f7 100644
--- a/lib/Controller/PageController.php
+++ b/lib/Controller/PageController.php
@@ -96,7 +96,6 @@ class PageController extends Controller
$csp->addAllowedImageDomain('*')
->addAllowedMediaDomain('*')
->addAllowedConnectDomain('*')// chrome breaks on audio elements
- ->allowEvalScript(true)
->addAllowedFrameDomain('https://youtube.com')
->addAllowedFrameDomain('https://www.youtube.com')
->addAllowedFrameDomain('https://player.vimeo.com')