Add script-src to CSP for update

tanx · tanx · commit de505518a17a · 2019-04-02T20:21:51.000+08:00
diff --git a/public/index.html b/public/index.html
@@ -3,7 +3,7 @@
   <head>
     <meta charset="utf-8">
     <!-- Mitigate XSS -->
-    <meta http-equiv="Content-Security-Policy" content="default-src 'self'; object-src 'none'; connect-src *; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self' data:">
+    <meta http-equiv="Content-Security-Policy" content="default-src 'self'; object-src 'none'; connect-src *; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self' data:">
     <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
     <title>Lightning</title>
   </head>
