New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Don't warn for 'unsafe-inline' if hash or nonce present in applicable directive #72

Open

aidantwoods opened this issue Jan 22, 2018 · 0 comments

Labels

bug

Milestone

Owner

aidantwoods commented Jan 22, 2018

E.g.

https://www.w3.org/TR/CSP2/#directive-script-src

If 'unsafe-inline' is not in the list of allowed script sources, or if at least one nonce-source or hash-source is present in the list of allowed script sources:[...]

As mentioned in #71.

aidantwoods added the bug label

aidantwoods added this to the Version 2.0.2 milestone

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment