Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Horizon dashboard does not work when using Content-Security-Policy headers without unsafe-eval #1128

Closed
shibinphilip789 opened this issue Mar 7, 2022 · 1 comment

Comments

@shibinphilip789
Copy link

  • Horizon Version: 5.9.1
  • Laravel Version: 8.40.0
  • PHP Version: 7.4.27
  • Redis Driver & Version: predis 1.1.10
  • Database Driver & Version: MySQL 8.0.28

Description:

Horizon dashboard does not work when using content security headers without unsafe-eval
Here is the error displayed in my console.

Screenshot 2022-03-07 at 1 15 53 PM

Steps To Reproduce:

I'm using a package bepsvpt/secure-headers to add CSP to header.
unsafe-eval is set to false in config/secure-headers.php which does not add unsafe-eval to CSP.

Screenshot 2022-03-07 at 1 13 07 PM

Dashboard does work when unsafe-eval is set to true, But I cannot have unsafe-eval added to CSP for security reasons.

@driesvints
Copy link
Member

I see the warning too but Horizon works for me without that package. Would appreciate any PR that solves this issue but for now it doesn't seems to be a blocker on default Horizon installations.

This issue was closed.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants