Skip to content

fix: add 'unsafe-inline' to CSP script-src/style-src in 2026-03-05 evening analysis articles#840

Merged
pethers merged 2 commits intoevening-analysis-2026-03-05-13bbbf9821635a4dfrom
copilot/sub-pr-836
Mar 5, 2026
Merged

fix: add 'unsafe-inline' to CSP script-src/style-src in 2026-03-05 evening analysis articles#840
pethers merged 2 commits intoevening-analysis-2026-03-05-13bbbf9821635a4dfrom
copilot/sub-pr-836

Conversation

Copy link
Contributor

Copilot AI commented Mar 5, 2026

All 14 2026-03-05-evening-analysis-*.html files had a stricter CSP than the rest of the news article corpus — script-src 'self' https: without 'unsafe-inline' — blocking JSON-LD inline scripts and inline styles.

Change

  • Added 'unsafe-inline' to both script-src and style-src in the CSP <meta> tag across all 14 language variants, matching the pattern used by every other news article:
<!-- Before -->
<meta http-equiv="Content-Security-Policy" content="...script-src 'self' https:; style-src 'self' https://fonts.googleapis.com;...">

<!-- After -->
<meta http-equiv="Content-Security-Policy" content="...script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;...">

Affected files: ar, da, de, en, es, fi, fr, he, ja, ko, nl, no, sv, zh.


✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

…ening analysis articles

Co-authored-by: pethers <1726836+pethers@users.noreply.github.com>
Copilot AI changed the title [WIP] Fix evening analysis duplicate entries issue fix: add 'unsafe-inline' to CSP script-src/style-src in 2026-03-05 evening analysis articles Mar 5, 2026
@pethers pethers marked this pull request as ready for review March 5, 2026 22:26
@pethers pethers merged commit e8845ef into evening-analysis-2026-03-05-13bbbf9821635a4d Mar 5, 2026
@pethers pethers deleted the copilot/sub-pr-836 branch March 5, 2026 22:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants