From 40d19da638e238bbbcfc82f7d8403c9936979392 Mon Sep 17 00:00:00 2001
From: hensm <m+github@matt.tf>
Date: Tue, 9 Apr 2019 01:24:27 +0100
Subject: [PATCH] Fix default CSP

---
 ext/bin/build.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ext/bin/build.js b/ext/bin/build.js
index 5d3a306..51e2d7d 100644
--- a/ext/bin/build.js
+++ b/ext/bin/build.js
@@ -58,7 +58,7 @@ const webpackConfig = require(`${ROOT}/webpack.config.js`)({
 
     // eval source map needs special CSP
   , contentSecurityPolicy: argv.mode === "production"
-        ? "default-src 'self'"
+        ? "script-src 'self'; object-src 'self'"
         : "script-src 'self' 'unsafe-eval'; object-src 'self'"
 
     // Developer info