Alex Gleason (alex@gleasonator.com)'s status on Friday, 26-May-2023 23:11:31 JST
-
Embed this notice
Alex Gleason (alex@gleasonator.com)'s status on Friday, 26-May-2023 23:11:31 JST Alex Gleason @kirby @meso @nekofag CSP absolutely does work and is necessary. It specifically prevents this type of attack. But you have to move your media to a subdomain for it to work properly.