Skip to content

Commit

Permalink
Link to CSP
Browse files Browse the repository at this point in the history
  • Loading branch information
zachleat committed Oct 5, 2023
1 parent e27e4de commit d78b03a
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -114,7 +114,7 @@ Deploy this Eleventy site in just a few clicks on these services:

#### Content Security Policy

If your site enforces a Content Security Policy (as public-facing sites should), you have a few choices (pick one):
If your site enforces a [Content Security Policy](https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP) (as public-facing sites should), you have a few choices (pick one):

1. In `base.njk`, remove `<style>{% getBundle "css" %}</style>` and uncomment `<link rel="stylesheet" href="{% getBundleFileUrl "css" %}">`
2. Configure the server with the CSP directive `style-src: 'unsafe-inline'` (less secure).

0 comments on commit d78b03a

Please sign in to comment.