From 61580fe3c766241fad30da805ab847f070e53ab2 Mon Sep 17 00:00:00 2001
From: Jean-Philippe Pialasse <jpp@koozali.org>
Date: Wed, 24 Sep 2025 15:45:33 -0400
Subject: [PATCH] * Wed Sep 24 2025 Jean-Philippe Pialasse <jpp@koozali.org>
 0.2-20.sme - relaxed CSP

---
 .../httpd/conf/httpd.conf/VirtualHosts/28BackupPCProxyPass   | 1 +
 smeserver-BackupPC.spec                                      | 5 ++++-
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/VirtualHosts/28BackupPCProxyPass b/root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/VirtualHosts/28BackupPCProxyPass
index 94ee2c3..7caaa27 100644
--- a/root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/VirtualHosts/28BackupPCProxyPass
+++ b/root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/VirtualHosts/28BackupPCProxyPass
@@ -22,6 +22,7 @@
     <Location /BackupPC>
         SSLRequireSSL on
         Require ip $localAccess $externalSSLAccess
+        Header set Content-Security-Policy  "script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'
     </Location>
 
 HERE
diff --git a/smeserver-BackupPC.spec b/smeserver-BackupPC.spec
index 8367016..d112196 100644
--- a/smeserver-BackupPC.spec
+++ b/smeserver-BackupPC.spec
@@ -4,7 +4,7 @@
 
 Name: smeserver-BackupPC
 Version: 0.2
-Release: 19%{?dist}
+Release: 20%{?dist}
 Summary: BackupPC integration into SME server
 
 Group: Applications/System
@@ -52,6 +52,9 @@ This package contains specific configuration for SME server
 #----------------------------------------------------
 
 %changelog
+* Wed Sep 24 2025 Jean-Philippe Pialasse <jpp@koozali.org> 0.2-20.sme
+- relaxed CSP
+
 * Tue Sep 23 2025 Jean-Philippe Pialasse <jpp@koozali.org> 0.2-19.sme
 - fix /run/BackupPC instead of /var prevents service start
 - fix smanager2 display