CSP 2.0 - Contrib.social

Proposed Changes

Remove Site Log reporting handler in favour of Reporting module
📌 Deprecate Site Log reporting handler Postponed

Change behaviour of 'none' to more closely match CSP spec
✨ Change handling 'none' with additional sources Fixed

Remove outdated exceptions in CoreCspSubscriber

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

Comment about 1 year ago →
🇨🇦Canada gapple
It would be nice to remove the outdated exceptions in CoreCspSubscriber, but requiring drupal/core ^10 or ^10.1

Drupal 9.5 / 10.0 removed the need for core/drupal.ajax to require an unsafe-inline exception for JavaScript, and 10.1 will remove the need for CSS; ckeditor 5 in Drupal 10 no longer needs inline attributes; quickedit was moved to contrib in Drupal 10 (but only really added an exception because of ckeditor 4).
Comment 5 months ago →
🇨🇦Canada gapple
Comment 13 days ago →
🇨🇦Canada gapple
Comment 13 days ago →
🇨🇦Canada gapple