If you use sobelow you will get a Missing Content-Security-Policy error with a default Phoenix setup. Managing Content Security Policy (CSP) can be tedious, so you may just want to opt for a catch-all 'unsafe-inline' approach to bypass it all. We should do better than that.

In this blog post, I'll build a module with helpers to integrate CSP handling into Phoenix and Phoenix LiveView. I think the code is too minimal to be a dependency, but some of it could maybe be added upstream in the put_secure_browser_headers plug in Phoenix.

continue reading on danschultzer.com

⚠️ This post links to an external website. ⚠️