From c1a8f4cfd6587cc167c042737c72236653a8c798 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Bj=C3=B6rn=20Fromme?= <fromme@dreipunktnull.com>
Date: Fri, 7 Oct 2022 13:50:42 +0200
Subject: [PATCH] Revoke csp headers for the time being

---
 .../ext/ep_events/Configuration/TypoScript/setup.typoscript | 6 +++---
 .../ext/ep_theme/Configuration/TypoScript/setup.typoscript  | 6 +++---
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/public/typo3conf/ext/ep_events/Configuration/TypoScript/setup.typoscript b/public/typo3conf/ext/ep_events/Configuration/TypoScript/setup.typoscript
index 8e05ac73..25e3a1fc 100644
--- a/public/typo3conf/ext/ep_events/Configuration/TypoScript/setup.typoscript
+++ b/public/typo3conf/ext/ep_events/Configuration/TypoScript/setup.typoscript
@@ -85,9 +85,9 @@ config {
     compressCss = 1
     typolinkEnableLinksAcrossDomains = 1
     additionalHeaders {
-        10 {
-            header = Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-inline'
-        }
+#        10 {
+#            header = Content-Security-Policy: default-src 'self' 'unsafe-inline'; connect-src 'self';
+#        }
         20 {
             header = Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
         }
diff --git a/public/typo3conf/ext/ep_theme/Configuration/TypoScript/setup.typoscript b/public/typo3conf/ext/ep_theme/Configuration/TypoScript/setup.typoscript
index 3887c057..06518597 100644
--- a/public/typo3conf/ext/ep_theme/Configuration/TypoScript/setup.typoscript
+++ b/public/typo3conf/ext/ep_theme/Configuration/TypoScript/setup.typoscript
@@ -103,9 +103,9 @@ config {
     content_from_pid_allowOutsideDomain = 1
     inlineStyle2TempFile = 0
     additionalHeaders {
-        10 {
-            header = Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-inline'
-        }
+#        10 {
+#            header = Content-Security-Policy: default-src 'self' 'unsafe-inline'; connect-src 'self' https://my.ep-reisen.de/;
+#        }
         20 {
             header = Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
         }