No more CSP meta headers

google / eleventy-high-performance-blog

A high performance blog template for the 11ty static site generator.

MIT License

4.02k stars 283 forks source link

Closed oddigy closed 1 year ago

oddigy commented 1 year ago

csp sha256 hashed inline scripts are properly generated however there are no more meta tags or HTTP Headers for CSP.

cramforce commented 1 year ago

I fixed this. However, I also made the CSP optional and off-by-default in the process.