81
Elxis 4.x/5.x DEV / Inline events, CSS and JS
« Last post by datahell on August 09, 2025, 20:08:24 »All inline events, CSS and javascript removed. Even JQuery library modified in order to be compatible with strict CSP policies.
Recommended CSP policy for Elxis configuration (Elxis 5.6 or newer, make sure third party extensions are compatible):
default-src 'self'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'nonce-{nonce}'; style-src 'self' 'nonce-{nonce}'; img-src 'self' *.elxis.net data:;
Note: {nonce} get replaced automatically by elxisDocument with the corresponding value.
Recommended CSP policy for Elxis configuration (Elxis 5.6 or newer, make sure third party extensions are compatible):
default-src 'self'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'nonce-{nonce}'; style-src 'self' 'nonce-{nonce}'; img-src 'self' *.elxis.net data:;
Note: {nonce} get replaced automatically by elxisDocument with the corresponding value.

Recent Posts