From d78b03ae1d059a8e69941e49fa0214595bcf828d Mon Sep 17 00:00:00 2001 From: Zach Leatherman Date: Thu, 5 Oct 2023 08:32:54 -0500 Subject: [PATCH] Link to CSP --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index a4b46ae..7177590 100644 --- a/README.md +++ b/README.md @@ -114,7 +114,7 @@ Deploy this Eleventy site in just a few clicks on these services: #### Content Security Policy -If your site enforces a Content Security Policy (as public-facing sites should), you have a few choices (pick one): +If your site enforces a [Content Security Policy](https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP) (as public-facing sites should), you have a few choices (pick one): 1. In `base.njk`, remove `` and uncomment `` 2. Configure the server with the CSP directive `style-src: 'unsafe-inline'` (less secure).