add_header Content-Security-Policy "default-src https:; script-src https: 'unsafe-inline'; style-src https: 'unsafe-inline'";
Conversation
Notices
-
Bob Mottram (bob@social.freedombone.net)'s status on Wednesday, 19-Apr-2017 18:52:11 UTC Bob Mottram @maiyannah @sulman the CSP avoids the "mixed content" situation. Currently I have it set as: