Closed oupala closed 6 years ago
I created a pull request about that into #84
By the way, I wonder what it this javascript useful for?
Everything seems to work even without this piece of javascript. Am I missing a specific feature?
Are you willing to merge this request or not?
Is there a problem with my code? Should I improve it in a specific way?
@oupala Can this be closed now that the pull was merged?
You're right!
apaxy homepage contains some inline javascript (see these lines).
Content Security Policy encourage to move inline javascript into a separate javascript file and not to use
script-src 'unsafe-inline'
.apaxy should move inline javascript into a separate javascript file.