Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fix: allow unsafe-inline for style-src #1369

Merged
merged 1 commit into from Apr 20, 2023
Merged

Fix: allow unsafe-inline for style-src #1369

merged 1 commit into from Apr 20, 2023

Conversation

thekaveman
Copy link
Member

Accidentally removed as part of #1358, but this is needed for payment processor overlay window.

According to https://csp.withgoogle.com/, the more critical piece of strict CSP is script-src, which disallowed unsafe-inline as part of #1358.

@thekaveman
fix(settings): allow unsafe-inline for style-src
9bdef24 
needed for payment processor overlay window
@thekaveman thekaveman requested a review from a team as a code owner April 20, 2023 20:54
@github-actions github-actions bot added back-end Django views, sessions, middleware, models, migrations etc. deployment-dev [auto] Changes that will trigger a deploy if merged to dev labels Apr 20, 2023
@thekaveman thekaveman merged commit b0c31c6 into dev Apr 20, 2023
16 checks passed
@thekaveman thekaveman deleted the fix/strict-csp branch April 20, 2023 20:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@angela-tran angela-tran angela-tran approved these changes

Assignees
No one assigned
Labels
back-end Django views, sessions, middleware, models, migrations etc. deployment-dev [auto] Changes that will trigger a deploy if merged to dev
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
2 participants
@thekaveman @angela-tran