remove `unsafe-inline` from default CSP policy

Open
#168 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
3/5
Estimated time
1-2 days
Newbie friendliness
35/100
Issue type
Refactor
Clarity
Mostly clear
Activity status
Stale
Domain
security

Research direction

Start by locating the default CSP policy and the SASJS build of Data Controller that emits the <script> tags. Confirm how the policy is applied, then remove unsafe-inline and the relevant script tags; done means the default policy no longer permits inline scripts and the build still works.

Written by the indexing model from the issue text.

Description

First, the SASJS build of Data Controller needs the <script> tags removed

Dominant language
TypeScript
Stars
22
Forks
3
No merged PRs in 30d

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from sasjs/server

All issues in sasjs/server

Similar issues

More TypeScript issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.