add unsafe-eval CSP to application. The d3-graphviz 3.0 version is required to...

add unsafe-eval CSP to application. The d3-graphviz 3.0 version is required to open unsafe-eval CSP.

mindinsight/backend/application.py

@@ -45,6 +45,7 @@ def get_security_headers():
         'frame-src': ["'self'"] + domain_white_list,
         'frame-ancestors': ["'self'"] + domain_white_list,
         'default-src': ["'self'"],
+        'script-src': ["'self'", "'unsafe-eval'"]
     }
 
     headers = {