From f41631c745b7c470974ef5bd6cfe28bc832ab4dd Mon Sep 17 00:00:00 2001 From: Dharini Jeeva Date: Tue, 10 Jan 2023 13:07:22 -0800 Subject: [PATCH] =?UTF-8?q?chore:=20=F0=9F=A4=96=20disable=20csp=20meta=20?= =?UTF-8?q?for=20prod=20(#1560)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- ui/admin/config/content-security-policy.js | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/ui/admin/config/content-security-policy.js b/ui/admin/config/content-security-policy.js index 0f157d937..3a7ac09f1 100644 --- a/ui/admin/config/content-security-policy.js +++ b/ui/admin/config/content-security-policy.js @@ -25,9 +25,10 @@ module.exports = function (environment) { if (API_HOST) policy['connect-src'].push(API_HOST); } + //enable csp meta tag only in dev env return { delivery: ['meta'], - enabled: environment !== 'test', + enabled: environment === 'development', policy, reportOnly: false, };