3 ms·
External sources yes, preventing an app to inject inline HTML and JavaScript is tricky.
by the_mitsuhiko 4y ago
External sources yes, preventing an app to inject inline HTML and JavaScript is tricky.
- ezekg 4y agoYou can block all inline scripts via CSP.
- the_mitsuhiko 4y agoThat’s why I said tricky and not impossible.