filter_plugins/csp_filters.py

@@ -91,7 +91,6 @@ class FilterModule(object):
                 'frame-ancestors',
                 'frame-src',
                 'script-src',
-                'script-src-elem',
                 'style-src',
                 'font-src',
                 'worker-src',
@@ -116,11 +115,11 @@ class FilterModule(object):
                         tokens.append(f"{web_protocol}://{matomo_domain}")
 
                 # ReCaptcha integration: allow loading scripts from Google if feature enabled
-                if self.is_feature_enabled(applications, 'recaptcha', application_id):
-                    if directive == 'script-src':
-                        tokens.append('https://www.google.com')
-                    if directive == 'script-src-elem':
-                        tokens.append('https://www.gstatic.com')
+                if (
+                    self.is_feature_enabled(applications, 'recaptcha', application_id)
+                    and directive == 'script-src'
+                ):
+                    tokens.append('https://www.google.com')
 
                 # Enable loading via ancestors
                 if (

roles/docker-bigbluebutton/tasks/main.yml

@@ -3,11 +3,6 @@
 - name: "include docker-compose role"
   include_role: 
     name: docker-compose
-  vars:
-    database_instance:  "{{ application_id }}"
-    database_password:  "{{ applications[application_id].credentials.postgresql_secret }}"
-    database_username:  "postgres"
-    database_name:      ""                              # Multiple databases
 
 - name:                 "Seed BigBlueButton Database for Backup"
   include_tasks:        "{{ playbook_dir }}/roles/backup-docker-to-local/tasks/seed-database-to-backup.yml"

roles/docker-bigbluebutton/vars/configuration.yml

@@ -14,10 +14,4 @@ features:
   central_database:   false
 domains:
   canonical:
-    - "meet.{{ primary_domain }}"
-csp:  
-  flags:
-    script-src:
-      unsafe-inline:  true
-    style-src:
-      unsafe-inline:  true
+    - "meet.{{ primary_domain }}"