feat: disable inline scripts

bcgov / nr-results-exam

Repository for RESULTS Exam

Apache License 2.0

0 stars 0 forks source link

feat: disable inline scripts #30

Open DerekRoberts opened 12 months ago

DerekRoberts commented 12 months ago

OpenShift deployments for TEST and PROD are getting stuck on CSP for inline scripts. Ideally we'd move anything inline to its own file and disable unsafe-inline in the Caddyfile. Any reason we can't do this?

We can disable the checks, but it's safer to work with them. Controlled in Caddyfile. https://github.com/bcgov/nr-results-exam/blob/main/frontend/Caddyfile#L26

@RMCampos @jazzgrewal

RMCampos commented 11 months ago

Yep, agreed! That's the right move.