From bf42fa135d8a0c6a04808147d3c3a4530825aeb8 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Ivar=20Conradi=20=C3=98sthus?= Date: Mon, 7 Sep 2020 09:23:59 +0200 Subject: [PATCH] fix: lax helmet csp config for styles. Required to support react-selct, see https://github.com/JedWatson/react-select/issues/2917 --- lib/middleware/helmet.js | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/lib/middleware/helmet.js b/lib/middleware/helmet.js index e47f5ece66..b847d83aa8 100644 --- a/lib/middleware/helmet.js +++ b/lib/middleware/helmet.js @@ -12,6 +12,13 @@ module.exports = function(config) { 'data:', 'gravatar.com', ], + styleSrc: [ + "'self'", + 'fonts.googleapis.com', + 'fonts.gstatic.com', + 'data:', + 'unsafe-inline', + ], }, }, });