{"action":"opened","issue":{"url":"https://api.github.com/repos/fguillot/kanboard/issues/1319","labels_url":"https://api.github.com/repos/fguillot/kanboard/issues/1319/labels{/name}","comments_url":"https://api.github.com/repos/fguillot/kanboard/issues/1319/comments","events_url":"https://api.github.com/repos/fguillot/kanboard/issues/1319/events","html_url":"https://github.com/fguillot/kanboard/issues/1319","id":109613246,"number":1319,"title":"Content Security Policy issue","user":{"login":"unnikked","id":2611548,"avatar_url":"https://avatars.githubusercontent.com/u/2611548?v=3","gravatar_id":"","url":"https://api.github.com/users/unnikked","html_url":"https://github.com/unnikked","followers_url":"https://api.github.com/users/unnikked/followers","following_url":"https://api.github.com/users/unnikked/following{/other_user}","gists_url":"https://api.github.com/users/unnikked/gists{/gist_id}","starred_url":"https://api.github.com/users/unnikked/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/unnikked/subscriptions","organizations_url":"https://api.github.com/users/unnikked/orgs","repos_url":"https://api.github.com/users/unnikked/repos","events_url":"https://api.github.com/users/unnikked/events{/privacy}","received_events_url":"https://api.github.com/users/unnikked/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-10-03T09:00:38Z","updated_at":"2015-10-03T09:00:38Z","closed_at":null,"body":"I'm using Chrome 45.0.2454.101 on Ubuntu and I get those error messages in Chrome Dev Tools\r\n\r\n```\r\nRefused to execute inline script because it violates the following Content Security Policy directive: \"default-src 'self'\". Either the 'unsafe-inline' keyword, a hash ('sha256--o6dUkqHoadD_Wh8b-7IDgA_5zPbO_7bQ04JhJcxTDk='), or a nonce ('nonce-...') is required to enable inline execution. Note also that 'script-src' was not explicitly set, so 'default-src' is used as a fallback.\r\n```\r\n\r\n```\r\nRefused to execute inline script because it violates the following Content Security Policy directive: \"default-src 'self'\". Either the 'unsafe-inline' keyword, a hash ('sha256-lsLpqtO2oyldxjRzHG9eRmiNMGfVWGy7G38B4WLyass='), or a nonce ('nonce-...') is required to enable inline execution. Note also that 'script-src' was not explicitly set, so 'default-src' is used as a fallback.\r\n```\r\n\r\nThe effect is that I'm unable for example to use drang & drop to move cards between columns.\r\n\r\nI'm using the latest stable version `1.0.18`. Before to post I searched but I found only this issue #168\r\n\r\nSorry if I made a duplicate. "}}