try to fix unsafe-eval

GSA · Feb 5, 2025 · 07c5b96 · 07c5b96
1 parent 9247614
commit 07c5b96
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 3 deletions.
diff --git a/app/__init__.py b/app/__init__.py
@@ -150,7 +150,7 @@ def _csp(config):
         "script-src": [
             "'self'",
             asset_domain,
-            "'unsafe-eval'",
+            # "'unsafe-eval'",
             "https://js-agent.newrelic.com",
             "https://gov-bam.nr-data.net",
             "https://www.googletagmanager.com",

diff --git a/notifications_utils/request_helper.py b/notifications_utils/request_helper.py
@@ -80,10 +80,14 @@ def rewrite_response_headers(status, headers, exc_info=None):
             headers.append(("Cross-Origin-Embedder-Policy", "require-corp"))
             headers.append(("Cross-Origin-Resource-Policy", "same-origin"))
             headers.append(("Cross-Origin-Opener-Policy", "same-origin"))
-            headers.append(("Cache-Control", "no-store, no-cache, must-revalidate, proxy-revalidate"))
+            headers.append(
+                (
+                    "Cache-Control",
+                    "no-store, no-cache, must-revalidate, proxy-revalidate",
+                )
+            )
             headers.append(("Pragma", "no-cache"))
 
-
             return start_response(status, headers, exc_info)
 
         return self._app(environ, rewrite_response_headers)