Skip to content

Tracy requires 'self' in CSP since 2.4#227

Merged
dg merged 1 commit into
nette:masterfrom
spaze:spaze-csp-self
Oct 2, 2016
Merged

Tracy requires 'self' in CSP since 2.4#227
dg merged 1 commit into
nette:masterfrom
spaze:spaze-csp-self

Conversation

@spaze
Copy link
Copy Markdown
Contributor

@spaze spaze commented Oct 1, 2016

Because it sends a separate HTTP request now (see 13f854d) it needs to load JS from the domain itself, too.

Thanks!

@spaze
Copy link
Copy Markdown
Contributor Author

spaze commented Oct 1, 2016

Also see #136, nonce is the way to go, but this doc update should do in the short term.

@dg dg merged commit 23868ee into nette:master Oct 2, 2016
@spaze
Copy link
Copy Markdown
Contributor Author

spaze commented Oct 2, 2016

Thanks @dg!

@spaze spaze deleted the spaze-csp-self branch October 2, 2016 19:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants