commit 11adec7e71dc62952a573a2201e7284c440f396b
author Ed Tanous <ed.tanous@intel.com> Wed Dec 19 17:59:28 2018 -0800
committer Ed Tanous <ed.tanous@intel.com> Sat Dec 22 17:34:04 2018 +0000
tree 18c1152ec5454d36054f4cafbec7fc960167013c
parent f04960f5e6992ac42c4a93bcd8c2d2ff11e8d501

webui: enable ngCSP

ngCSP allows angular to avoid using inline style and unsafe eval
mechanisms.  Enabling this will allow us to update to a more stringent
content-security policy.

for more details, see documentation here:
https://docs.angularjs.org/api/ng/directive/ngCsp

Tested by:
Launching the GUI, and saw no ill effects.

Change-Id: I4db732e997c2901d1fe57eee99607007b5e3afec
Signed-off-by: Ed Tanous <ed.tanous@intel.com>

app/index.js

diff --git a/app/index.js b/app/index.js
index 4bb6a4c..645f315 100644
--- a/app/index.js
+++ b/app/index.js
@@ -6,7 +6,7 @@
  * @exports app/index
  *
  */
-
+import 'angular/angular-csp.css';
 import 'bootstrap/dist/css/bootstrap.css';
 
 import angular from 'angular';