2 ms·
I was under the impression that most (if not all) browser JS frameworks need hilariously bad CSPs like this, particularly for dynamic styling. Am I mistaken? I
by theandrewbailey 2y ago
I was under the impression that most (if not all) browser JS frameworks need hilariously bad CSPs like this, particularly for dynamic styling. Am I mistaken?
I'm surprised that CSPs with unsafe-inline aren't treated with the same hate that table based layouts get. They are really bad.