search

letsencrypt / website

Let's Encrypt Website and Documentation
https://letsencrypt.org
Mozilla Public License 2.0
841 stars 573 forks source link

Remove inline styles #950

Open tdelmas opened 4 years ago

tdelmas commented 4 years ago

Inline style should be moved into scss files.

It will also help #757

Once this is done, the CSP policy could probably be updated to remove unsafe-inline for style-src.

⚠️ For svg, CSP and Firefox: https://bugzilla.mozilla.org/show_bug.cgi?id=1262842 : https://pokeinthe.io/2016/04/09/black-icons-with-svg-and-csp/

tdelmas commented 4 years ago

Also, for CSP, Plotly may be a problem: https://github.com/plotly/plotly.js/issues/2355