{"action":"opened","issue":{"url":"https://api.github.com/repos/darklow/django-suit/issues/445","labels_url":"https://api.github.com/repos/darklow/django-suit/issues/445/labels{/name}","comments_url":"https://api.github.com/repos/darklow/django-suit/issues/445/comments","events_url":"https://api.github.com/repos/darklow/django-suit/issues/445/events","html_url":"https://github.com/darklow/django-suit/issues/445","id":117715396,"number":445,"title":"CSP unsafe inline removal","user":{"login":"rchrd2","id":182479,"avatar_url":"https://avatars.githubusercontent.com/u/182479?v=3","gravatar_id":"","url":"https://api.github.com/users/rchrd2","html_url":"https://github.com/rchrd2","followers_url":"https://api.github.com/users/rchrd2/followers","following_url":"https://api.github.com/users/rchrd2/following{/other_user}","gists_url":"https://api.github.com/users/rchrd2/gists{/gist_id}","starred_url":"https://api.github.com/users/rchrd2/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rchrd2/subscriptions","organizations_url":"https://api.github.com/users/rchrd2/orgs","repos_url":"https://api.github.com/users/rchrd2/repos","events_url":"https://api.github.com/users/rchrd2/events{/privacy}","received_events_url":"https://api.github.com/users/rchrd2/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-11-19T00:45:45Z","updated_at":"2015-11-19T00:45:45Z","closed_at":null,"body":"It seems like no one else has brought this up. Unfortunately these templates cause errors in modern browser when CSP headers are in effect. It's becoming more common for sites to disallow unsafe-inline and unsafe-eval. \r\n\r\n```\r\n  <script type=\"text/javascript\">var Suit = { $: $.noConflict() }; if (!$) $ = Suit.$; </script>\r\n```\r\nIt seems do-able to remove all inline scripts in this app.\r\n\r\nhttps://developer.mozilla.org/en-US/docs/Web/Security/CSP"}}