google / google/strict-csp

style-src directive doesn't exist

Open
#51 2 comments 1 reaction 0 assignees View on GitHub
Dominant language
TypeScript
Stars
49
Forks
11
PR merge metrics
No merged PRs in 30d

Description

I expected this library to generate the hashes for the script-src and style-src directives, as well as the script-src and style-src directives themselves, but the style-src directive does not exist in the generated CSP and is not even mentioned anywhere in the libraries' code. Are there plans to address this issue? Would it include sourced styles hashes in the same way as it already does for the sourced scripts? When?

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.