oschaaf commented on issue #1758: ModPagespeedHonorCsp ignores that unsafe-eval 
is not an allowed script source
URL: 
https://github.com/apache/incubator-pagespeed-mod/issues/1758#issuecomment-371285918
 
 
   I have a hunch.. One workaround you could try is to add any CSP directives 
as a html meta tag as well, to see if that improves CSP-awareness of the module.
   
   At some point, while working on something else, I discovered by accident 
that the module may miss CSP headers depending on how they are associated to 
the internal apache request. This could explain your issue. (Also #1696 should 
fix this)
   

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


With regards,
Apache Git Services

Reply via email to