ampproject / ampproject/amp.dev
Add CSP to boilerplate generation
Open
Type: Feature
- Dominant language
- HTML
- Stars
- 600
- Forks
- 675
- PR merge metrics
- No merged PRs in 30d
Description
Similar to the speed optimizations we have, we could include the default CSP header in the boilerplate generator.
Might also be possible to customize it a bit, e.g. only allow the styles of the fonts used and offer to limit things like `media-src`.
Related: #2726 and #2672
Contributor guide
Assessment
This issue has not been assessed yet.