3 ms·
Content-Security-Policy is a tricky one. For starters, enabling CSP if you're using Angular causes a 30% slowdown[1]. Secondly, a lot of performance optimizatio
by j_baker 13y ago
Content-Security-Policy is a tricky one. For starters, enabling CSP if you're using Angular causes a 30% slowdown[1]. Secondly, a lot of performance optimizations can be gained by inlining JavaScript. The latter one can be circumvented using SPDY server push, but that isn't widely used yet.
[1] http://docs.angularjs.org/api/ng.directive:ngCsp http://docs.angularjs.org/api/ng.directive:ngCsp
- scott_karana 13y agoWow. There are more implications than I would have guessed with CSP. Thanks for pointing that out!