Hacker News new | ask | show | jobs
by jrahmy 2712 days ago
CSP affects inline scripts as well. They are actually disallowed by default and must be explicitly whitelisted.