Inline JavaScript Breaks with Strict CSP
Open
- Dominant language
- CSS
- Stars
- 365
- Forks
- 35
- Avg merge
- 1d 17h
- Merged PRs (30d)
- 3
Description
Hi,
I’m using your admin theme and recently implemented a strict Content Security Policy that blocks inline JavaScript and such as a standard security measure. I noticed some issues, for example the logout button (the filter offcanvas too) uses:
```html
Logout
```
This doesn’t work with strict CSP. A simple fix is to use a form-based logout button instead, like this:
```html
{% csrf_token %}
Logout
```
Just wanted to share this in case it helps improve the theme. Thanks for your great work as always!
Contributor guide
Assessment
This issue has not been assessed yet.