Support Directive.Script in ContentSecurityPolicyFilter.registerAllowedSources

Author: bbimber

server/embedded/src/org/labkey/embedded/LabKeyServer.java

@@ -74,6 +74,7 @@ public static void main(String[] args)
                 object-src ${OBJECT.SOURCES} ;  /* Substitution value defaults to 'none' unless overridden by an admin */
                 style-src 'self' 'unsafe-inline' ${STYLE.SOURCES} ;
                 img-src 'self' data: ${IMAGE.SOURCES} ;
+                script-src-elem 'self' ${SCRIPT.SOURCES} ;
                 font-src 'self' data: ${FONT.SOURCES} ;
                 script-src 'unsafe-eval' 'strict-dynamic' 'nonce-${REQUEST.SCRIPT.NONCE}' ;
                 base-uri 'self' ;