Grot (@grafanabot) 1e533f37ed Security: Update default CSP template and fix firefox CSP issues (#34836) (#35162) ...

* Security: Update default content_security_policy_template
- Add 'strict-dynamic' back to script-src
- Add ws(s)://$ROOT_PATH to connect-src
- Change onEvent to on-event in angular templates to fix CSP issues in firefox.
- Add blob: to style-src

(cherry picked from commit 8143991b94)

2021-06-03 12:11:14 +01:00

..

index_view_test.go

Security: Update default CSP template and fix firefox CSP issues (#34836) (#35162)

2021-06-03 12:11:14 +01:00