- Issue created by @dieterholvoet
- 🇧🇪Belgium dieterholvoet Brussels
Setting to Needs work because more changes might be necessary, don't have time to do a deep dive right now.
Drupal offers the
Content Security Policy module →
to easily configure CSP for a site. Gin Toolbar uses an inline script in at least one place, so we need to add a nonce attribute to that script.
Add nonce attributes and append to the CSP policies where necessary.
Active
3.0
Code
Setting to Needs work because more changes might be necessary, don't have time to do a deep dive right now.