diff --git a/src/Services/Identity/Identity.API/Startup.cs b/src/Services/Identity/Identity.API/Startup.cs index 43662acdd..0b3b2371a 100644 --- a/src/Services/Identity/Identity.API/Startup.cs +++ b/src/Services/Identity/Identity.API/Startup.cs @@ -121,10 +121,10 @@ namespace Microsoft.eShopOnContainers.Services.Identity.API app.UseStaticFiles(); - // Make work identity server redirections in Edge and lastest versions of browsers. WARN: Not valid in a production environment. + // TODO Make work identity server redirections in Edge and lastest versions of browsers. WARN: Not valid in a production environment. app.Use(async (context, next) => { - context.Response.Headers.Add("Content-Security-Policy", "script-src 'unsafe-inline'"); + context.Response.Headers.Add("Content-Security-Policy", "script-src 'self' http://host.docker.internal:5105; script-src-elem 'self' http://host.docker.internal:5105"); await next(); }); diff --git a/src/Services/Identity/Identity.API/Views/Shared/_Layout-SPA.cshtml b/src/Services/Identity/Identity.API/Views/Shared/_Layout-SPA.cshtml index fab01ff51..f5589cf4f 100644 --- a/src/Services/Identity/Identity.API/Views/Shared/_Layout-SPA.cshtml +++ b/src/Services/Identity/Identity.API/Views/Shared/_Layout-SPA.cshtml @@ -3,7 +3,6 @@
-