search

bem / bem-core

BEM Core Library
https://ru.bem.info/technologies/classic/i-bem/
Other
275 stars 94 forks source link

page: CSP meta-tag support #1070

Closed arikon closed 9 years ago

arikon commented 9 years ago

Proposing forward-porting of Content Security Policy (CSP) support from bem-bl's b-page to the page block.

PR to bem-bl: https://github.com/bem/bem-bl/pull/650 PR to islands: https://nda.ya.ru/3QnPqJ

Guria commented 9 years ago

CSP support was added in #882 bem/bem-bl#650 seems about csp meta-tag

arikon commented 9 years ago

@Guria Yes, it is about meta-tag with Content Security Policy

narqo commented 9 years ago

@arikon is it true, that these things from bem/bem-bl#650 are made just to set proper defaults for CSP policies, which are needed mostly for Yandex services? If not, why not to just ask users to add proper meta tag with { elem : 'meta' }?

arikon commented 9 years ago

@narqo It is a feature to set CSP more conventionally, not like single string as a value of attribute. We could also provide reasonable defaults (self for most policies etc).

aristov commented 9 years ago

Since we don't have an ability to specify any reasonable rich defaults for general open-source projects (like we do at Yandex), it looks that plain HTML meta tag is easier for usage instead of understating custom BEMJSON API. Discussed with @veged and @narqo