search

ArdanaLabs / DanaSwapUI

Other
3 stars 3 forks source link

Revert "Security headers/CSP + nearby collateral cleanup" #46

Closed MatthewCroughan closed 2 years ago

MatthewCroughan commented 2 years ago

Reverts ArdanaLabs/DanaSwapUI#45

The content security policy does not work.

image

toastal commented 2 years ago

@MatthewCroughan This may require style-src unsafe-inline, likely because of whoever's decision to use CSS in JS (just guessing though). It's kind of difficult to test CSP without a staging environment. You can run tools to look at the current state, but testing production mode locally is not easy (at least I don't think it's easy, but maybe Nix has a trick I don't know).

MatthewCroughan commented 2 years ago

We need a staging workflow. I need to implement this. Give me some time.