Remove all inline scripts from app
- Dominant language
- Python
- Stars
- 12
- Forks
- 21
- Avg merge
- 5d 19h
- Merged PRs (30d)
- 5
Description
# TL;DR
If possible, we should remove all inline scripts from the app, including at least these three files:
- studies/templates/studies/_image_display.html
- web/templatetags/web_extras.py
- studies/templates/studies/study_detail.html
# Narrative
This will bring the app up to speed with the new CSP added to staging, at which point we can add the CSP to production as well
# Acceptance Criteria
- All inline scripts removed from code
- new CSP added to kubernetes profile for production
Contributor guide
Research direction
Start by reviewing inline scripts in studies/templates/studies/_image_display.html, web/templatetags/web_extras.py, and studies/templates/studies/study_detail.html, then inspect the Kubernetes production profile for CSP configuration. Confirm that all inline scripts are removed and that the production profile has the new CSP required by the acceptance criteria.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- kubernetes, python
- Domain
- backend, devops, security
- Issue type
- Refactor
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100