This repository has been archived by the owner on Oct 24, 2021. It is now read-only.

Improve CSP #70

Open

3 tasks

e2jk opened this issue Jun 7, 2020 · 0 comments

Labels

Owner

e2jk commented Jun 7, 2020 •

edited

Loading

Do not use inline JavaScript
- Will remove the need for "unsafe-inline" in the script-src CSP header
Do not use inline styles
- Will remove the need for "unsafe-inline" in the style-src CSP header
Do not use inline images/SVG
- Will remove the need for "data:" in the img-src CSP header (related to Bootstrap v4 breaks Content-Security-Policy compared to Bootstrap v3 twbs/bootstrap#25394)

The text was updated successfully, but these errors were encountered:

e2jk changed the title ~~Do not use inline javascript~~ Improve CSP

e2jk added the security label

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.