Skip to content

Commit e5f03fe

Browse files
committed
Add dirty workaround for speakers view inline script
1 parent 2b2b8d6 commit e5f03fe

1 file changed

Lines changed: 4 additions & 0 deletions

File tree

app.js

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -173,6 +173,10 @@ if (config.csp.enable) {
173173
}
174174
if (directives.scriptSrc.indexOf('\'unsafe-inline\'') === -1) {
175175
directives.scriptSrc.push(getCspNonce)
176+
// TODO: This is the SHA-256 hash of the inline script in
177+
// build/reveal.js/plugins/notes/notes.html . Any cleaner
178+
// solution appreciated.
179+
directives.scriptSrc.push('\'sha256-EtvSSxRwce5cLeFBZbvZvDrTiRoyoXbWWwvEVciM5Ag=\'')
176180
}
177181
directives.connectSrc.push(getCspWebSocketUrl)
178182
if (config.csp.upgradeInsecureRequests === 'auto') {

0 commit comments

Comments
 (0)