4 commits

Author	SHA1	Message	Date
snipe	e08911ab8f	Removed nonce for now ... There is a dependency in a package where we can’t edit the script tags to add the nonce	2017-11-02 10:57:05 -07:00
snipe	aab635154a	Default to turning CSP off until we can fix vue/CSP issues	2017-10-02 13:29:14 -07:00
snipe	efd71f8bfe	For #3998 - Disable CSP if debug=true ... To avoid all the nonce hell from debugbar	2017-09-29 04:53:09 -07:00
snipe	46d87849f4	Added content security middleware	2017-09-28 19:45:15 -07:00