diff options
| author | Thomas Citharel <github@tcit.fr> | 2020-12-12 21:11:42 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2020-12-12 21:11:42 +0100 |
| commit | 71cf92697cf1632803e9e57629504871cad549da (patch) | |
| tree | bd58d19ac21f20042d54566ea8f9eb50c8d94412 /lib | |
| parent | 5644795813e99e344ded8af93900500142964108 (diff) | |
| download | nextcloud-server-71cf92697cf1632803e9e57629504871cad549da.tar.gz nextcloud-server-71cf92697cf1632803e9e57629504871cad549da.zip | |
Update comment to reflect current CSP policy
JS unsafe-eval was removed a long time ago in https://github.com/nextcloud/server/pull/11028
Diffstat (limited to 'lib')
| -rw-r--r-- | lib/public/AppFramework/Http/ContentSecurityPolicy.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/public/AppFramework/Http/ContentSecurityPolicy.php b/lib/public/AppFramework/Http/ContentSecurityPolicy.php index 3a9ab8f8c15..20263769630 100644 --- a/lib/public/AppFramework/Http/ContentSecurityPolicy.php +++ b/lib/public/AppFramework/Http/ContentSecurityPolicy.php @@ -36,7 +36,7 @@ namespace OCP\AppFramework\Http; * notice that Nextcloud ships already with sensible defaults and those policies * should require no modification at all for most use-cases. * - * This class allows unsafe-eval of javascript and unsafe-inline of CSS. + * This class allows unsafe-inline of CSS. * * @since 8.1.0 */ |