CSP: Exclude PDF editor (just doesn't work in FF)

2017-09-28 18:44:12 +02:00
parent 29b157f287
commit 784f6e703c
4 changed files with 11 additions and 5 deletions
--- a/src/pretix/plugins/ticketoutputpdf/views.py
+++ b/src/pretix/plugins/ticketoutputpdf/views.py
@@ -44,7 +44,7 @@ class EditorView(EventPermissionRequiredMixin, TemplateView):

    def get(self, request, *args, **kwargs):
        resp = super().get(request, *args, **kwargs)
-        resp['Content-Security-Policy'] = "script-src 'unsafe-eval'; style-src 'unsafe-inline'; img-src blob:; font-src data: blob:"
+        resp._csp_ignore = True
        return resp

    def process_upload(self):