Formatting on CSP section

This commit is contained in:
Zach Leatherman 2023-10-05 08:32:15 -05:00
parent 764f2c7561
commit e27e4de9eb

View File

@ -112,12 +112,9 @@ Deploy this Eleventy site in just a few clicks on these services:
- `_includes/layouts/post.njk`: the blog post template (wrapped into `base.njk`) - `_includes/layouts/post.njk`: the blog post template (wrapped into `base.njk`)
- `_includes/postslist.njk` is a Nunjucks include and is a reusable component used to display a list of all the posts. `content/index.njk` has an example of how to use it. - `_includes/postslist.njk` is a Nunjucks include and is a reusable component used to display a list of all the posts. `content/index.njk` has an example of how to use it.
If your site enforces a Content Security Policy (as public-facing sites should), either, in `base.njk`, disable #### Content Security Policy
```html
<style>{% getBundle "css" %}</style> If your site enforces a Content Security Policy (as public-facing sites should), you have a few choices (pick one):
```
and enable 1. In `base.njk`, remove `<style>{% getBundle "css" %}</style>` and uncomment `<link rel="stylesheet" href="{% getBundleFileUrl "css" %}">`
```html 2. Configure the server with the CSP directive `style-src: 'unsafe-inline'` (less secure).
<link rel="stylesheet" href="{% getBundleFileUrl "css" %}">
```
or configure the server with the CSP directive `style-src: 'unsafe-inline'` (which is less secure).