Add inline_js Method

[darkwing]

Is there any reason to avoid inline JavaScript? Could save a request for tiny JS file content.

[jsocol]

I'm actually surprised we didn't add it in #59

[cvan]

FWIW, inline JS is a CSP violation and will not execute. But we should still do this.

[jsocol]

Well it's only a CSP violation if the policy forbids it. For sites that don't allow user-generated content it's not at all unreasonable. --

Sent from my phone, please excuse the occasional typo.

On Wed, Jun 11, 2014 at 5:49 PM, Christopher Van [email protected]
wrote:

FWIW, inline JS is a CSP violation. But we should still do this.

Reply to this email directly or view it on GitHub:
#65 (comment)