#2510104: Convert drupalSettings from JavaScript to JSON, to allow for CSP in the future → could potentially be backported to 7.x
Copy the last 7.x patch from the original 8.x issue, and continue.
7.0 ⚰️
It makes Drupal less vulnerable to abuse or misuse. Note, this is the preferred tag, though the Security tag has a large body of issues tagged to it. Do NOT publicly disclose security vulnerabilities; contact the security team instead. Anyone (whether security team or not) can apply this tag to security improvements that do not directly present a vulnerability e.g. hardening an API to add filtering to reduce a common mistake in contributed modules.
Not all content is available!
It's likely this issue predates Contrib.social: some issue and comment data are missing.
Updated the patch from #33 to apply cleanly to the latest version.