※ Hiding JSON-formatted data in the DOM with CSP enabled: http://mathiasbynens.be/notes/json-dom-csp …
-
-
Replying to @mathias
@mathias interesting post! I wonder if there’s a way to get this to be CSP compliant https://github.com/yahoo/express-state …1 reply 0 retweets 1 like -
Replying to @ericf
@ericf@mathias AFAIK inline scripts *are* an option if you specify type="application/json" http://nmatatal.blogspot.co.nz/2013/01/removing-inline-javascript-for-csp.html …1 reply 0 retweets 0 likes
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.
JavaScript, HTML, CSS, HTTP, performance, security, Bash, Unicode, i18n, macOS.