inveniosoftware / invenio-app

WSGI, Celery and CLI applications for Invenio flavours.
https://invenio-app.readthedocs.io
MIT License
3 stars 35 forks source link

Allow newer versions of Flask-Talisman #79

Closed max-moser closed 2 years ago

max-moser commented 2 years ago

Allow newer versions of Flask-Talisman and adapt the tests to the changes in 0.8.0 (i.e. removal of the X-Content-Security-Policy header).

The X-Content-Security-Policy HTTP header was deprecated in favor of the standardized Content-Security-Policy header and it is recommended against adding it alongside with the standardized version: https://content-security-policy.com/ The only "modern" browser that doesn't support the standardized header is IE, which only supports the sandbox directive anyway, however: https://stackoverflow.com/questions/42937146/content-security-policy-does-not-work-in-internet-explorer-11