diff --git a/lib/csp.js b/lib/csp.js index 557acf8..9630219 100644 --- a/lib/csp.js +++ b/lib/csp.js @@ -8,7 +8,7 @@ const createCspHeader = (options, { const scriptHashes = scripts.map(cspHash) const directives = [ ['default-src', origin], - ['script-src', "'self'", origin, ...scriptHashes], + ['script-src', origin, ...scriptHashes], ['img-src', "'self'", origin], ['connect-src', api], ['report-uri', reportUri]