discourse/spec/lib/content_security_policy
David Taylor 767b49232e
FIX: Omit CSP nonce and hash values when unsafe-inline enabled (#25590)
Browsers will ignore unsafe-inline if nonces or hashes are included in the CSP. When unsafe-inline is enabled, nonces and hashes are not required, so we can skip them.

Our strong recommendation remains that unsafe-inline should not be used in production.
2024-02-07 12:35:35 +00:00
..
builder_spec.rb FIX: Omit CSP nonce and hash values when unsafe-inline enabled (#25590) 2024-02-07 12:35:35 +00:00