- Content Policy: Allow inline scripts, otherwise there is errors in browser/inspect/console.

- Set default matomo settings to disabled.

Thanks to xet7 !
This commit is contained in:
Lauri Ojansivu 2018-08-15 23:41:01 +03:00
parent 5c33a85341
commit 807c6ce09e
5 changed files with 18 additions and 12 deletions

View file

@ -6,7 +6,8 @@ Meteor.startup(() => {
// Trusted URL that can embed Wekan in iFrame.
const trusted = process.env.TRUSTED_URL;
BrowserPolicy.framing.disallow();
BrowserPolicy.content.disallowInlineScripts();
//Allow inline scripts, otherwise there is errors in browser/inspect/console
//BrowserPolicy.content.disallowInlineScripts();
BrowserPolicy.content.disallowEval();
BrowserPolicy.content.allowInlineStyles();
BrowserPolicy.content.allowFontDataUrl();