CSP: remove unsafe-inline from script-src

[alextreme]

Thema / Theme

Other

Omschrijving / Description

Lets remove unsafe-inline also from script-src

open-api-framework/open_api_framework/conf/base.py

Line 1048 in f6aac9e

CSP_SCRIPT_SRC = CSP_DEFAULT_SRC + ["'unsafe-inline'"]

Double-check that Redoc and third-party admin apps work as expected. If it's necessary to whitelist specific URLs or to relax this setting for specific components that's fine, as long as the default is secure/secureder

Toegevoegde waarde / Added value

No response

Aanvullende opmerkingen / Additional context

No response

[alextreme]

Discussed and doesn't have priority unless there is a stakeholder