tree 7f5507905e8a0fd984cd5f790c119b1c382bd9a9
parent cb103130e18689b9a8e15284f930606d512328cd
author Ed Tanous <ed.tanous@intel.com> 1569272763 -0700
committer Ed Tanous <ed.tanous@intel.com> 1570828420 +0000

Fix content-security-policy when XSS is disabled

Content-Security-Policy is a bit odd when loading from another source.
Technically, everything is cross site when in a debug context, so
blocking cross site scripting in this case is a bit non-sensical.

Tested:
This was reported to me, but I was unable to reproduce, so no way to
really test.  Pushing for someone else to be able to test first, then
will update this once done.

Signed-off-by: Ed Tanous <ed.tanous@intel.com>
Change-Id: I9ae125a5577c43164d5b3b1280b783336fbfec71