News for hackers. Stuff that matters.

A comment on HTTP Security headers you should be using. Parent comment

Re:HTTP Security headers you should be using by kyrra on Thursday January 23, 2014 @01:04PM (#7109852)
It looks like you can enable inline and eval stuff.

    Content-Security-Policy: script-src 'self' 'unsafe-eval' 'unsafe-inline'
[ Parent | on HN ]
Re:HTTP Security headers you should be using by amenod on Thursday January 23, 2014 @02:28PM (#7110538)
But in that case you don't benefit much from it... (afaik)
[ Parent | on HN ]