[GitHub] helged commented on issue #1758: ModPagespeedHonorCsp ignores that unsafe-eval is not an allowed script source

helged commented on issue #1758: ModPagespeedHonorCsp ignores that unsafe-eval is not an allowed script source URL: https://github.com/apache/incubator-pagespeed-mod/issues/1758#issuecomment-371294079 If it is possible to change the filter order, maybe some guidance/documentation would he

[GitHub] helged commented on issue #1758: ModPagespeedHonorCsp ignores that unsafe-eval is not an allowed script source

helged commented on issue #1758: ModPagespeedHonorCsp ignores that unsafe-eval is not an allowed script source URL: https://github.com/apache/incubator-pagespeed-mod/issues/1758#issuecomment-371292660 Not sure if I should close this or not. I'll leave it open until an updated version of m

[GitHub] helged commented on issue #1758: ModPagespeedHonorCsp ignores that unsafe-eval is not an allowed script source

helged commented on issue #1758: ModPagespeedHonorCsp ignores that unsafe-eval is not an allowed script source URL: https://github.com/apache/incubator-pagespeed-mod/issues/1758#issuecomment-371292366 Adding the CSP via a meta tag to the HTML head - in addition to the Apache configuration

[GitHub] helged commented on issue #1758: ModPagespeedHonorCsp ignores that unsafe-eval is not an allowed script source

helged commented on issue #1758: ModPagespeedHonorCsp ignores that unsafe-eval is not an allowed script source URL: https://github.com/apache/incubator-pagespeed-mod/issues/1758#issuecomment-371282880 The CSP header is added via Apache's security.conf. I can post the file; I am also happy