fix(api-docs): 🐛 disable unsafe-inline style-src

ref swagger-api/swagger-ui#5578
collinbarrett · Jan 24, 2021 · 29b6517 · 29b6517
1 parent 44bae63
commit 29b6517
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/reverse-proxy/conf.d.dev/default.conf b/reverse-proxy/conf.d.dev/default.conf
@@ -20,6 +20,6 @@ server {
     rewrite    ^/api/(.*)$ /$1 break;
     proxy_pass http://api-docs:8080;
     include    location-includes/*;
-    add_header Content-Security-Policy "default-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'none'; connect-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' validator.swagger.io data:;" always;
+    add_header Content-Security-Policy "default-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'none'; connect-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self'; img-src 'self' validator.swagger.io data:;" always;
   }
 }
diff --git a/reverse-proxy/conf.d/default.conf b/reverse-proxy/conf.d/default.conf
@@ -23,7 +23,7 @@ server {
     rewrite    ^/api/(.*)$ /$1 break;
     proxy_pass http://api-docs:8080;
     include    location-includes/*;
-    add_header Content-Security-Policy "default-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'none'; connect-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' validator.swagger.io data:;" always;
+    add_header Content-Security-Policy "default-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'none'; connect-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self'; img-src 'self' validator.swagger.io data:;" always;
   }
 
   location / {