fixed review button, fixed cors

src/Controller/SongController.php

@@ -55,7 +55,7 @@ class SongController extends AbstractController
         $data['activeAction'] = $request->query->get('action');
 
         if($this->getUser() != null) {
-            $resultUserReview = $em->getRepository(SongReview::class)->findBy(array('user' => $this->getUser()));
+            $resultUserReview = $em->getRepository(SongReview::class)->findBy(array('song' => $resultSong, 'user' => $this->getUser()));
             $data['userReview'] = $resultUserReview;
 
             if($this->getUser() != $resultUploader) {

templates/base.html.twig

@@ -8,7 +8,6 @@
 
       <!-- Meta Tags -->
       <link rel="icon" type="image/png" href="{{ asset('assets/img/favicon.png') }}" />
-      <meta http-equiv="Content-Security-Policy" content="script-src 'self' 'unsafe-inline';" />
       <meta property="og:site_name" content="SpinSha.re"/>
       <meta name="description" content="Share your custom charts for the rhythm game Spin Rhythm XD on SpinSha.re" />
       {% block meta %}{% endblock %}