removed unsafe-inline styles via svgo-loader. fixes #740

2018-02-26 11:48:28 -08:00 · 2018-02-26 11:48:28 -08:00 · 74728782f3
commit 74728782f3
parent 0a0980f9e3
4 changed files with 241 additions and 22 deletions
--- a/server/routes/index.js
+++ b/server/routes/index.js
@ -36,11 +36,7 @@ module.exports = function(app) {
          ],
          imgSrc: ["'self'", 'https://www.google-analytics.com'],
          scriptSrc: ["'self'"],
-          styleSrc: [
-            "'self'",
-            "'unsafe-inline'",
-            'https://code.cdn.mozilla.net'
-          ],
+          styleSrc: ["'self'", 'https://code.cdn.mozilla.net'],
          fontSrc: ["'self'", 'https://code.cdn.mozilla.net'],
          formAction: ["'none'"],
          frameAncestors: ["'none'"],