Hi!

The new ASF CSP settings have pretty thoroughly broken the Phoenix website.

Me and some colleagues tried to fix it, but the cross-site links are added
by the maven-skin plugin skin, and even the newest one loads the libraries
remotely.

I know nothing about skinning in the maven site plugin.
Is there some way to hack the skin to use local resources ? (without
forking it)
Could we disable the JS features so that skin works at least somewhat ?

The real solution would probably be either rebasing the website to a skin
that works without remote artifacts, or completely rebasing to some
different site generation tool.

These are big and unpleasant tasks, but they are very high priority, as our
public website is currently broken, and will be permanently broken once ASF
turns the setting on permanently.

Istvan

Reply via email to