oschaaf commented on issue #1758: ModPagespeedHonorCsp ignores that unsafe-eval is not an allowed script source URL: https://github.com/apache/incubator-pagespeed-mod/issues/1758#issuecomment-371285918 I have a hunch.. One workaround you could try is to add any CSP directives as a html meta tag as well, to see if that improves CSP-awareness of the module. At some point, while working on something else, I discovered by accident that the module may miss CSP headers depending on how they are associated to the internal apache request. This could explain your issue. (Also #1696 should fix this)
---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: us...@infra.apache.org With regards, Apache Git Services