See https://developer.mozilla.org/en-US/docs/Web/Security/CSP/CSP_policy_directives#style-src
The framework should support users that want to build their apps for CSP. In this case, the style-src directive would be in violation by Angular 2's use of inline <style> elements for things like CSS encapsulation.
I was curious if Angular 1 supported CSP, and it seems that Angular 1 indeed generates a stylesheet (build/angular-csp.css) that users can consume for CSP mode.
cc @tbosch @matsko
See https://developer.mozilla.org/en-US/docs/Web/Security/CSP/CSP_policy_directives#style-src
The framework should support users that want to build their apps for CSP. In this case, the
style-srcdirective would be in violation by Angular 2's use of inline<style>elements for things like CSS encapsulation.I was curious if Angular 1 supported CSP, and it seems that Angular 1 indeed generates a stylesheet (
build/angular-csp.css) that users can consume for CSP mode.cc @tbosch @matsko