top | item 45107246

(no title)

alserio | 6 months ago

well one difference is that application/json scripts are still subject to CSP policies

discuss

order

unilynx|6 months ago

How so? I don't remember ever having seen issues with this. If anything CSP steers you towards this (instead of inline scripts directly assigning to JS variables)

alserio|6 months ago

I thought I knew but it seems that the CSP story is unclear. I couldn't find an authoritative source for either position