Open
Description
cf georchestra/georchestra#4403 and https://discourse.osgeo.org/t/testing-ahead-of-2-27-0-release/145727/34
as of now, the header breaks CSP when it is enabled, at least on geoserver, and also on superset (but for the latter CSP is just reporting, not hard-failing)
from my understanding, the links to css should have the nonce attribute found on the other links to css in the rest of the page.
Metadata
Metadata
Assignees
Labels
No labels