- connect_src = if Config.get([:media_proxy, :enabled]) do
- sources = build_csp_multimedia_source_list()
- ["connect-src 'self' blob: ", static_url, ?\s, websocket_url, ?\s, sources]
- else
- ["connect-src 'self' blob: ", static_url, ?\s, websocket_url]
- end
-
- script_src =
- if Config.get(:env) == :dev do
- "script-src 'self' 'unsafe-eval'"
+ connect_src =
+ if Config.get([:media_proxy, :enabled]) do
+ sources = build_csp_multimedia_source_list()
+ ["connect-src 'self' ", static_url, ?\s, websocket_url, ?\s, sources]