Remove extra self in csp

ImmutableWebApps · Nov 30, 2018 · 63501ee · 63501ee
1 parent 4854fa2
commit 63501ee
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/csp.js b/lib/csp.js
@@ -8,7 +8,7 @@ const createCspHeader = (options, {
   const scriptHashes = scripts.map(cspHash)
   const directives = [
     ['default-src', origin],
-    ['script-src', "'self'", origin, ...scriptHashes],
+    ['script-src', origin, ...scriptHashes],
     ['img-src', "'self'", origin],
     ['connect-src', api],
     ['report-uri', reportUri]