[DEP] adjusted Dockerfile; adjusted CSP

Author: dameyerdave

svip-o-vue/Dockerfile

@@ -10,6 +10,6 @@ RUN npm install
 RUN npx browserslist@latest --update-db
 
 # mask out the host's node_modules from being included in the container, even when bind-mounting
-VOLUME /app/node_modules/
+# VOLUME /app/node_modules/
 
 # COPY . ./

svip_api/svip_server/settings/base.py

@@ -237,7 +237,7 @@
 # Allow some urls to be integrated in iframes
 CSP_DEFAULT_SRC = ["'self'"]
 CSP_SCRIPT_SRC = ["https://cdnjs.cloudflare.com",
-                  "'self' 'unsafe-inline' 'unsafe-eval'"]
+                  "'unsafe-inline'"]
 CSP_STYLE_SRC = ["https://cdnjs.cloudflare.com",
                  "https://fonts.googleapis.com",
                  "'self' 'unsafe-inline'"]