allowEvalScript set to true

Signed-off-by: Benjamin Brahmer <[email protected]>
nextcloud · Jun 18, 2023 · 9b29d84 · 9b29d84
1 parent 45cbfad
commit 9b29d84
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -5,6 +5,7 @@ The format is mostly based on [Keep a Changelog](https://keepachangelog.com/en/1
 # Unreleased
 ## [22.x.x]
 ### Changed
+-  allowEvalScript set to true (#2262)
 
 ### Fixed
 

diff --git a/lib/Controller/PageController.php b/lib/Controller/PageController.php
@@ -96,6 +96,7 @@ public function index(): TemplateResponse
         $csp->addAllowedImageDomain('*')
             ->addAllowedMediaDomain('*')
             ->addAllowedConnectDomain('*')// chrome breaks on audio elements
+            ->allowEvalScript(true)
             ->addAllowedFrameDomain('https://youtube.com')
             ->addAllowedFrameDomain('https://www.youtube.com')
             ->addAllowedFrameDomain('https://player.vimeo.com')