themotte / rDrama

This code runs https://www.themotte.org. Forked from https://github.com/Aevann1/rDrama
GNU Affero General Public License v3.0
25 stars 30 forks source link

Remove `unsafe-inline` CSP setting. #701

Open zorbathut opened 10 months ago

zorbathut commented 10 months ago

This implies that we remove all of our inline javascript into functions (or other various uglier solutions; let's just do that.)

Doing the whole thing might be hard, but if you're reading this because of the Simple tag, just getting started on it won't be hard; do the easy stuff and let someone know the easy stuff is done!