[GitHub] jmarantz commented on issue #1758: ModPagespeedHonorCsp ignores that unsafe-eval is not an allowed script source

[GitBox <gi...@apache.org>]

jmarantz commented on issue #1758: ModPagespeedHonorCsp ignores that unsafe-eval is not an allowed script source
URL: https://github.com/apache/incubator-pagespeed-mod/issues/1758#issuecomment-371293485
 
 
   Leaving it open makes sense, although it seems like this might be complex to fix if the filter that adds in these headers runs after mod_pagespeed, preventing mod_pagespeed from seeing the headers at all.
   
   If that's the case, filter-order tweaking can add a fair amount of complexity and risk.

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services