search

alexandrevicenzi / Flex

The minimalist Pelican theme.
https://flex.alxd.me
MIT License
608 stars 331 forks source link

implement CSP metadata in base.html #104

Closed stillbeben closed 7 years ago

stillbeben commented 7 years ago

As per Mozilla Observatory the CSP Header should be implemented. As this is a huge goal for the standard Pelican user we should at least implement it as metadata tag to prevent browsers from unloading unsafe scripts.

You may want to cherry pick my commit: https://github.com/rullmann/pelican-theme-flex/commit/bcd1f0c5ad7e579bbc01dacb4080bd0b5e77689f

alexandrevicenzi commented 7 years ago

Adding this you can break someone else's theme based on Flex.

I don't see any use is this for a static blog generator.

alexandrevicenzi commented 7 years ago

If you think this would have a real value to someone else, please, reopen this issue.