vichan-devel / vichan

Vichan is the most popular and widely used imageboard software in the world. It is a free, light-weight, fast, highly configurable and user-friendly imageboard software package.
https://vichan.info
Other
596 stars 193 forks source link

Content Security Policy compatibility #732

Open Zankaria opened 2 months ago

Zankaria commented 2 months ago

https://infosec.mozilla.org/guidelines/web_security#content-security-policy

CSP allows to block XSS attacks by preventing the execution of unauthorized javascript or css inside a html page. While vichan should already be compatible with CSP's basic form, it's not currently possible to set the policy to it's strictest form as vichan's includes inline javascript and stylesheets.