What is the current best-practice for using Content-Security-Policy with modernizr?
问题 We want to secure our site with Content-Security-Policy, and even with the setting of allowing inline scripts ( default-src 'self'; script-src 'self' 'unsafe-inline' ), loading modernizr (2.6.2) produces 4 CSP violations: I upgraded to the latest version (3.6.0), the develop version, and now it produces over 30 CSP violations: I couldn't find any official statement on CSP on the modernizr site, it merely mentions that in 2012, they added a detect for Content Security Policy (https://modernizr