From eafdacc3780f81d45545c790aa8606cc0c438b6e Mon Sep 17 00:00:00 2001
From: Kevin Veen-Birkenbach <kevin@veen.world>
Date: Wed, 17 Sep 2025 02:33:28 +0200
Subject: [PATCH] Optimized CSP for XWIKI

---
 roles/web-app-xwiki/config/main.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/roles/web-app-xwiki/config/main.yml b/roles/web-app-xwiki/config/main.yml
index a8a8ab14..6d987eae 100644
--- a/roles/web-app-xwiki/config/main.yml
+++ b/roles/web-app-xwiki/config/main.yml
@@ -26,6 +26,8 @@ server:
   csp:
     whitelist:      {}
     flags:
+      script-src:
+        unsafe-eval:    true
       script-src-elem:
         unsafe-inline:  true
   domains: