Steve Walsh

We've decided we do not need to go the SRI route and that CSP nonce satisfies the PCI requirements. This is covered under > You must prevent execution of unauthorized...

> Thanks for your PR! I know it's still in draft, but a couple of quick comments that might be helpful. > > * if you have an editor that...

> See also #39880 where I made a good start on this. I've been stalled for a while on [#39880 (comment)](https://github.com/mdn/content/pull/39880#discussion_r2425080573) > > Usually violations that do reporting use the...