From 8313116b7f49df2e631b47ace1be33f62ac9aaac Mon Sep 17 00:00:00 2001
From: zadam <adam.zivner@gmail.com>
Date: Fri, 2 Oct 2020 23:33:28 +0200
Subject: [PATCH] disable CSP completely, fixes #1282 (and other similar
 issues)

---
 src/app.js | 7 +------
 1 file changed, 1 insertion(+), 6 deletions(-)

diff --git a/src/app.js b/src/app.js
index 3cd32aa7c..c7cd83ad3 100644
--- a/src/app.js
+++ b/src/app.js
@@ -21,12 +21,7 @@ app.set('view engine', 'ejs');
 
 app.use(helmet({
     hidePoweredBy: false, // deactivated because electron 4.0 crashes on this right after startup
-    contentSecurityPolicy: {
-        directives: {
-            defaultSrc: ["*", "'unsafe-inline'", "'unsafe-eval'"],
-            imgSrc: ["'self' data:"]
-        }
-    }
+    contentSecurityPolicy: false
 }));
 
 app.use(bodyParser.json({limit: '500mb'}));