Add Content-Security Policy #24

New issue

Open

opened 2025-04-21 14:19:01 +02:00 by rafael · 0 comments

rafael commented

2025-04-21 14:19:01 +02:00

Collaborator

Some more information on this:

https://danschultzer.com/posts/content-security-policy-with-liveview
https://furlough.merecomplexities.com/elixir/phoenix/security/2021/02/26/content-security-policy-configuration-in-phoenix.html
https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/CSP
Make sure our CSP works with liveview websockets
Remove "Config.CSP" from the ignore array in .sobelow-config

Some more information on this: - https://danschultzer.com/posts/content-security-policy-with-liveview - https://furlough.merecomplexities.com/elixir/phoenix/security/2021/02/26/content-security-policy-configuration-in-phoenix.html - https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/CSP - [ ] Make sure our CSP works with liveview websockets - [ ] Remove `"Config.CSP"` from the `ignore` array in `.sobelow-config`

rafael referenced this issue

2025-04-21 14:19:54 +02:00

Add basic CI setup #23

rafael added this to the Sprint 2 - 07.05. - 28.05 project

2025-05-07 15:01:00 +02:00