New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

bug 948151: Enforce CSP in staging #157

Merged
merged 1 commit into from Nov 7, 2018

Conversation

Projects
None yet
2 participants
@jwhitlock
Copy link
Member

jwhitlock commented Nov 7, 2018

Let's see what breaks when we enforce CSP in staging. There appears to be one active CSP issue, where a font is loaded by a data: URI, but I don't think we do this ourselves, this might be CSP doing its job.

I'm waiting to enable CSP reporting in production until the manually inlined JS examples experiment is done (mdn/sprints#629).

@jwhitlock jwhitlock requested a review from escattone Nov 7, 2018

@escattone
Copy link
Member

escattone left a comment

🤞 Thanks @jwhitlock!

@escattone escattone merged commit 60192a9 into mdn:master Nov 7, 2018

@jwhitlock jwhitlock deleted the jwhitlock:csp-enforce-stage-948151 branch Nov 8, 2018

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment