{"action":"created","issue":{"url":"https://api.github.com/repos/alphagov/frontend/issues/1047","repository_url":"https://api.github.com/repos/alphagov/frontend","labels_url":"https://api.github.com/repos/alphagov/frontend/issues/1047/labels{/name}","comments_url":"https://api.github.com/repos/alphagov/frontend/issues/1047/comments","events_url":"https://api.github.com/repos/alphagov/frontend/issues/1047/events","html_url":"https://github.com/alphagov/frontend/pull/1047","id":189765108,"number":1047,"title":"Remove unused content security policy code","user":{"login":"tijmenb","id":233676,"avatar_url":"https://avatars.githubusercontent.com/u/233676?v=3","gravatar_id":"","url":"https://api.github.com/users/tijmenb","html_url":"https://github.com/tijmenb","followers_url":"https://api.github.com/users/tijmenb/followers","following_url":"https://api.github.com/users/tijmenb/following{/other_user}","gists_url":"https://api.github.com/users/tijmenb/gists{/gist_id}","starred_url":"https://api.github.com/users/tijmenb/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tijmenb/subscriptions","organizations_url":"https://api.github.com/users/tijmenb/orgs","repos_url":"https://api.github.com/users/tijmenb/repos","events_url":"https://api.github.com/users/tijmenb/events{/privacy}","received_events_url":"https://api.github.com/users/tijmenb/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":4,"created_at":"2016-11-16T16:42:41Z","updated_at":"2016-11-17T10:35:39Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/alphagov/frontend/pulls/1047","html_url":"https://github.com/alphagov/frontend/pull/1047","diff_url":"https://github.com/alphagov/frontend/pull/1047.diff","patch_url":"https://github.com/alphagov/frontend/pull/1047.patch"},"body":"This was introduced in https://github.com/alphagov/frontend/pull/733. It hasn't made it to production yet and we have no immediate plans to do so. I really hope we pick this up again, but in the meantime I think it's good to remove the code to avoid clutter and unnecessary maintenance.\r\n\r\nAllows us to remove one more thing from the deprecated alphagov-deployment (https://github.gds/gds/alphagov-deployment/pull/1289).\r\n\r\nhttps://trello.com/c/WkJ6qbE6/224-12-factorise-frontend"},"comment":{"url":"https://api.github.com/repos/alphagov/frontend/issues/comments/261212848","html_url":"https://github.com/alphagov/frontend/pull/1047#issuecomment-261212848","issue_url":"https://api.github.com/repos/alphagov/frontend/issues/1047","id":261212848,"user":{"login":"davbo","id":330135,"avatar_url":"https://avatars.githubusercontent.com/u/330135?v=3","gravatar_id":"","url":"https://api.github.com/users/davbo","html_url":"https://github.com/davbo","followers_url":"https://api.github.com/users/davbo/followers","following_url":"https://api.github.com/users/davbo/following{/other_user}","gists_url":"https://api.github.com/users/davbo/gists{/gist_id}","starred_url":"https://api.github.com/users/davbo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/davbo/subscriptions","organizations_url":"https://api.github.com/users/davbo/orgs","repos_url":"https://api.github.com/users/davbo/repos","events_url":"https://api.github.com/users/davbo/events{/privacy}","received_events_url":"https://api.github.com/users/davbo/received_events","type":"User","site_admin":false},"created_at":"2016-11-17T10:35:39Z","updated_at":"2016-11-17T10:35:39Z","body":"@boffbowsh the reasons it was never switched on are in here https://gdstechnology.blog.gov.uk/2015/02/12/experimenting-with-content-security-policy-on-gov-uk/ in particular\r\n\r\n> This part of the CSP 2 specification works well, but because it's not widely available in browsers yet we're unable to use CSP to prevent inline JavaScript from running.\r\n\r\nThe policy here allows `'unsafe-inline'` so I can understand not pushing for it in production without the CSP2 support (which is now available in pretty much all browsers)."}}
{"actor":{"display_login":"davbo"}}