Gerhard Schlager f62215046f FEATURE: Completely remove unsafe-eval from CSP ... Plugins can add it via API if they need to use `eval`: ``` extend_content_security_policy(script_src: [:unsafe_eval]) ``` See https://meta.discourse.org/t/104243		2019-12-13 12:38:32 +01:00
..
builder.rb	FEATURE: allow extending CSP base-uri and object-src	2019-01-09 15:34:14 -05:00
default.rb	FEATURE: Completely remove unsafe-eval from CSP	2019-12-13 12:38:32 +01:00
extension.rb	FEATURE: Calculate CSP based on active themes (#6976)	2019-02-11 12:32:04 +00:00
middleware.rb	FEATURE: Calculate CSP based on active themes (#6976)	2019-02-11 12:32:04 +00:00