fix: helmet wap csp in quotes

2024-12-22 19:07:54 +01:00 · 2020-09-07 09:51:30 +02:00 · 2020-09-07 09:51:30 +02:00 · 7ac134312f
commit 7ac134312f
parent 86d6589145
2 changed files with 5 additions and 1 deletions
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@ -1,5 +1,9 @@
 # Changelog

+## 3.5.4
+
+- fix: helmet wap csp in quotes
+
 ## 3.5.3

 - fix: lax helmet csp config for styles.
--- a/lib/middleware/helmet.js
+++ b/lib/middleware/helmet.js
@ -14,10 +14,10 @@ module.exports = function(config) {
                    ],
                    styleSrc: [
                        "'self'",
+                        "'unsafe-inline'",
                        'fonts.googleapis.com',
                        'fonts.gstatic.com',
                        'data:',
-                        'unsafe-inline',
                    ],
                },
            },