Set Angular CSP

If you don't set this flag, Angular helpfully attempts to check if this is disabled by *triggering* a CSP violation just to see what happens... 🙈

app/views/layouts/darkswarm.html.haml

@@ -1,4 +1,4 @@
-%html
+%html{ "ng-csp": "no-unsafe-eval" }
   %head
     %meta{charset: 'utf-8'}/
     %meta{name: 'viewport', content: "width=device-width,initial-scale=1.0"}/

app/views/layouts/registration.html.haml

@@ -1,4 +1,4 @@
-%html
+%html{ "ng-csp": "no-unsafe-eval" }
   %head
     %meta{charset: 'utf-8'}/
     %meta{name: 'viewport', content: "width=device-width,initial-scale=1.0"}/

app/views/spree/layouts/admin.html.haml

@@ -1,5 +1,5 @@
 !!!
-%html{:lang => "en"}
+%html{:lang => "en", "ng-csp": "no-unsafe-eval" }
   %head{"data-hook" => "admin_inside_head"}
     = render :partial => 'spree/admin/shared/head'
 

app/views/spree/layouts/bare_admin.html.haml

@@ -1,4 +1,4 @@
-%html{ lang: "en" }
+%html{ lang: "en", "ng-csp": "no-unsafe-eval" }
   %head{"data-hook" => "admin_inside_head"}= render :partial => 'spree/admin/shared/head'
   %body.admin{"data-ajax-root-path" => main_app.root_path}
     #wrapper{"data-hook" => ""}