Hi! The new ASF CSP settings have pretty thoroughly broken the Phoenix website.
Me and some colleagues tried to fix it, but the cross-site links are added by the maven-skin plugin skin, and even the newest one loads the libraries remotely. I know nothing about skinning in the maven site plugin. Is there some way to hack the skin to use local resources ? (without forking it) Could we disable the JS features so that skin works at least somewhat ? The real solution would probably be either rebasing the website to a skin that works without remote artifacts, or completely rebasing to some different site generation tool. These are big and unpleasant tasks, but they are very high priority, as our public website is currently broken, and will be permanently broken once ASF turns the setting on permanently. Istvan