Closed veryprofessionaldodo closed 3 years ago
@gcandal @joamag I forgot to mention this, but post-processing for CSR requires this to function.
@veryprofessionaldodo to do what? What the hell is post-processing trying to fetch from RIPE Core that has a script-src
?
It was necessary for the RIPE SDK demo, as the post-processing library requires loading of two scripts that serve as look-up tables for the SMAA pass.
I'll try to manually replace the content-security to add that variable, instead of changing the framework itself.
Yeah, explicitly setting that variable in the demo works, closing the PR.
Newer features for client-side-rendering require the loading of "blob:" scripts for anti-aliasing purposes, this prevents browser from blocking the necessary requests.