Brian Smith

Hi @tsweli, thanks for raising this. `Content-Security-Policy: default-src 'self';` would then be more restrictive than the SOP as there are some cross-origin requests that the SOP allows. You can see...

Right, I'm fine with closing this because there's nothing incorrect, although I think we could be clearer between CSP & SOP/CORS concepts in this section. I am going to be...

I had some trouble using the [linked example](https://glitch.com/edit/#!/web-otp?path=views%2Findex.html%3A55%3A8), could you provide steps to reproduce it so I can have a look? Also tagging @rachelandrew who I think was the original...

That was me in https://github.com/mdn/content/pull/32258 which fixed `var` etc., but didn't catch `alert()` uses. Good idea about ``, I think we can use that instead.

It feels a little wonky to use 24px here instead of 20px as with the others. What do you think about this: https://codepen.io/bsmth/pen/mdYNyJb i.e.: ```css body > div { background-color:...

> Yes, 20px is easy to explain. Looks better!

I'm so sorry for dragging out this review... I've read through the description again and it can do with a reword because it's already describing percentage values. This branch has...

BTW this might be interesting to check: https://blog.mozilla.org/webrtc/cross-browser-support-for-choosing-webrtc-codecs/

> Closing in favor of [mdn/mdn#561](https://github.com/mdn/mdn/issues/561) good idea, thanks!

Thanks for reporting. We could replace with https://expressjs.com/en/guide/using-template-engines.html, what do you think?