Merge pull request #203 from AthennaIO/develop

jlenon7 · web-flow · commit a9fa4bc769cf · 2025-01-05T12:10:49.000-03:00
chore(response): add more tags to CSP
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@athenna/http",
-  "version": "5.16.0",
+  "version": "5.17.0",
   "description": "The Athenna Http server. Built on top of fastify.",
   "license": "MIT",
   "author": "João Lenon <lenon@athenna.io>",
diff --git a/src/context/Response.ts b/src/context/Response.ts
@@ -124,7 +124,7 @@ export class Response {
 
     await this.header(
       'Content-Security-Policy',
-      "default-src 'self' 'unsafe-inline'"
+      "default-src 'self' 'unsafe-inline' 'unsafe-eval' 'img-src' 'style-src-elem' 'script-src-elem'"
     )
       .safeHeader('Content-Type', 'text/html; charset=utf-8')
       .send(content)

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "@athenna/http",`
`3`		`- "version": "5.16.0",`
	`3`	`+ "version": "5.17.0",`
`4`	`4`	`"description": "The Athenna Http server. Built on top of fastify.",`
`5`	`5`	`"license": "MIT",`
`6`	`6`	`"author": "João Lenon <[email protected]>",`
Original file line number	Diff line number	Diff line change
`@@ -124,7 +124,7 @@ export class Response {`
`124`	`124`
`125`	`125`	`await this.header(`
`126`	`126`	`'Content-Security-Policy',`
`127`		`- "default-src 'self' 'unsafe-inline'"`
	`127`	`+ "default-src 'self' 'unsafe-inline' 'unsafe-eval' 'img-src' 'style-src-elem' 'script-src-elem'"`
`128`	`128`	`)`
`129`	`129`	`.safeHeader('Content-Type', 'text/html; charset=utf-8')`
`130`	`130`	`.send(content)`