Hello dear Infra.

Recently Sebb made us aware about the
https://infra.apache.org/tools/csp.html CSP builder (we were overriding CSP
headers in our `.htacces` in Airflow).

I initially removed it - thinking that we needed it for "use cases"
videos - and there we have static images and click-through to open youtube
videos. But we also have this page where we embed images and allow to
"click to play" for the videos  have https://airflow.apache.org/meetups/ so
I added the CSP back in the way described in the CSP builder.

Now - I would like to double-check if the CSP settings we have is "OK"
(this is what the page says - to reach out here - to make sure that
everything - both in the CSP and the way how we embed the images in the
https://airflow.apache.org/meetups/ page is OK - as I am not entirely sure
if what we do is OK.

J.

Reply via email to