From 90edaee2573820f051672ba8ff3133a22daff164 Mon Sep 17 00:00:00 2001
From: xHyroM <generalkubo@gmail.com>
Date: Mon, 2 Jan 2023 22:45:48 +0100
Subject: [PATCH] fix: add 'unsafe-inline' to script-src

---
 src/layouts/Layout.astro | 2 +-
 vercel.json              | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/layouts/Layout.astro b/src/layouts/Layout.astro
index 9470414..8b59c53 100644
--- a/src/layouts/Layout.astro
+++ b/src/layouts/Layout.astro
@@ -37,7 +37,7 @@
         />
 
         <!-- CSP -->
-        <meta http-equiv="Content-Security-Policy" content="img-src 'self'; font-src *; style-src 'self' 'unsafe-inline' fonts.googleapis.com; script-src 'self'; object-src 'none'" />
+        <meta http-equiv="Content-Security-Policy" content="img-src 'self'; font-src *; style-src 'self' 'unsafe-inline' fonts.googleapis.com; script-src 'self' 'unsafe-inline'; object-src 'none'" />
 
         <link rel="preconnect" href="https://fonts.googleapis.com" />
         <link
diff --git a/vercel.json b/vercel.json
index 0e1ca2b..92635c1 100644
--- a/vercel.json
+++ b/vercel.json
@@ -5,7 +5,7 @@
         "headers" : [
           {
             "key" : "Content-Security-Policy",
-            "value" : "img-src 'self'; font-src *; style-src 'self' 'unsafe-inline' fonts.googleapis.com; script-src 'self'; object-src 'none'"
+            "value" : "img-src 'self'; font-src *; style-src 'self' 'unsafe-inline' fonts.googleapis.com; script-src 'self' 'unsafe-inline'; object-src 'none'"
           }
         ]
       }