Relax CSP for debit-notes printing

Author: andreas venizelou

Protest/Http/Listener.cs

@@ -277,7 +277,10 @@ private async Task ListenerCallback(HttpListenerContext ctx) {
 
             ctx.Response.AddHeader("X-Frame-Options", "DENY");
             ctx.Response.AddHeader("X-Content-Type-Options", "nosniff");
-            ctx.Response.AddHeader("Content-Security-Policy", "default-src 'self'; img-src 'self' data:");
+
+            //ctx.Response.AddHeader("Content-Security-Policy", "default-src 'self'; img-src 'self' data:");
+            //relaxed policy for debit-notes printing
+            ctx.Response.AddHeader("Content-Security-Policy", "default-src 'self'; img-src 'self' data:; script-src 'self'; style-src 'self' 'unsafe-inline'");
 
             if (await CacheHandler(ctx, path)) return;