From 9b29d84b47c78f33efcd87184c9791e06a322841 Mon Sep 17 00:00:00 2001 From: Benjamin Brahmer Date: Sat, 17 Jun 2023 12:03:03 +0200 Subject: [PATCH] allowEvalScript set to true Signed-off-by: Benjamin Brahmer --- CHANGELOG.md | 1 + lib/Controller/PageController.php | 1 + 2 files changed, 2 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 5adb778911..d5ca6c138d 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -5,6 +5,7 @@ The format is mostly based on [Keep a Changelog](https://keepachangelog.com/en/1 # Unreleased ## [22.x.x] ### Changed +- allowEvalScript set to true (#2262) ### Fixed diff --git a/lib/Controller/PageController.php b/lib/Controller/PageController.php index abdd3f2f78..41d0e7f89c 100644 --- a/lib/Controller/PageController.php +++ b/lib/Controller/PageController.php @@ -96,6 +96,7 @@ public function index(): TemplateResponse $csp->addAllowedImageDomain('*') ->addAllowedMediaDomain('*') ->addAllowedConnectDomain('*')// chrome breaks on audio elements + ->allowEvalScript(true) ->addAllowedFrameDomain('https://youtube.com') ->addAllowedFrameDomain('https://www.youtube.com') ->addAllowedFrameDomain('https://player.vimeo.com')