Add CSP to index template

Open gregory-latinier opened this issue 7 years ago • 4 comments

Fix #235 The icon are not displayed because the PR #233 needs to be approved first

Feb 26 '18 08:02 gregory-latinier

The CSP should be sent in an HTTP header, and must be configurable because it's not always served on steemit.com. Look and see how condenser does it.

Feb 27 '18 15:02 sneak

Hi @gregory-latinier where are we at with this PR?

Apr 03 '18 18:04 roadscape

@sneak what's your verdict on this? LGTM.

Apr 09 '18 14:04 gl2748

It's still not right. It should have a sane CSP by default. Development should override it using a development config. Please look at how condenser does it using the npm config module.

Apr 16 '18 10:04 sneak