4 ms·
> Anyway, CSP clearly isn't useless... but try deploying it on your average Wordpress blog sometime. What issues have you found with this?
by seanwilson 11y ago
> Anyway, CSP clearly isn't useless... but try deploying it on your average Wordpress blog sometime.
What issues have you found with this?
- sangnoir 11y agoNot OP, but my guess is random plugins stop working with strict (i.e. secure) policies, if they weren't written with CSP in mind.
- seanwilson 11y agoBad for development time but good for security then I'd guess.
- nly 11y agoIts not really plugins. The vast majority of wordpress themes out there come with inline css, inline javascript, and prebaked dependencies on things like jquery and google fonts hosted on 3rd party CDNs.