Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

feat: disable inline scripts #30

Open
DerekRoberts opened this issue Sep 23, 2023 · 1 comment
Open

feat: disable inline scripts #30

DerekRoberts opened this issue Sep 23, 2023 · 1 comment
Assignees
@RMCampos @jazzgrewal
Labels
enhancement New feature or request

Comments

@DerekRoberts
Copy link
Member

DerekRoberts commented Sep 23, 2023 •
edited
Loading

OpenShift deployments for TEST and PROD are getting stuck on CSP for inline scripts. Ideally we'd move anything inline to its own file and disable unsafe-inline in the Caddyfile. Any reason we can't do this?

We can disable the checks, but it's safer to work with them. Controlled in Caddyfile.
https://github.com/bcgov/nr-results-exam/blob/main/frontend/Caddyfile#L26

@RMCampos @jazzgrewal
@DerekRoberts DerekRoberts added the enhancement New feature or request label Sep 23, 2023
@RMCampos
Copy link
Contributor

RMCampos commented Oct 2, 2023

Yep, agreed! That's the right move.

@DerekRoberts DerekRoberts mentioned this issue Oct 9, 2024
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@RMCampos RMCampos

@jazzgrewal jazzgrewal

Labels
enhancement New feature or request
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@RMCampos @DerekRoberts @jazzgrewal