From 0b971ea570382982b6da81dbed924041c95e7c8b Mon Sep 17 00:00:00 2001
From: David Luzar <luzar.david@gmail.com>
Date: Mon, 13 Apr 2020 16:28:05 +0200
Subject: [PATCH] Remove CSP (#1418)

* remove csp

* remove csp from now.json
---
 now.json          | 4 ----
 public/index.html | 4 ----
 2 files changed, 8 deletions(-)

diff --git a/now.json b/now.json
index fa3a3204aa..75a64f33e7 100644
--- a/now.json
+++ b/now.json
@@ -18,10 +18,6 @@
         {
           "key": "Referrer-Policy",
           "value": "origin"
-        },
-        {
-          "key": "Content-Security-Policy",
-          "value": "default-src https: data: 'unsafe-inline'; connect-src https://*.excalidraw.com https://*.excalidraw.now.sh wss://excalidraw-socket.herokuapp.com https://excalidraw-socket.herokuapp.com https://sentry.io;"
         }
       ]
     }
diff --git a/public/index.html b/public/index.html
index 11aaa50b6e..39179f00ab 100644
--- a/public/index.html
+++ b/public/index.html
@@ -64,10 +64,6 @@
     />
     <!-- OG tags require absolute url for images -->
     <meta name="twitter:image" content="https://excalidraw.com/og-image.png" />
-    <meta
-      http-equiv="Content-Security-Policy"
-      content="block-all-mixed-content; child-src 'self' https://codesandbox.io https://*.csb.app; worker-src 'self'; connect-src 'self' https: wss: http: ws:; default-src 'self'; font-src 'self' data: https: filesystem:; img-src 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://codesandbox.io https://*.csb.app https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https:;"
-    />
     <link rel="shortcut icon" href="favicon.ico" type="image/x-icon" />
     <link
       href="https://excalidraw-socket.herokuapp.com/socket.io"