Improve csp
Open
Type: enhancement
- Dominant language
- Dart
- Stars
- 944
- Forks
- 184
- Avg merge
- 1d 15h
- Merged PRs (30d)
- 12
Description
From lighthouse:
Ensure CSP is effective against XSS attacks
Host allowlists can frequently be bypassed. Consider using CSP nonces or hashes instead, along with 'strict-dynamic' if necessary.
Contributor guide
Assessment
This issue has not been assessed yet.