member badge
Joe Scanlon
Feature Overview
  • Allow teams to embed Marker.io on sites that use a strict Content Security Policy (CSP) without requiring
    unsafe-inline
    in
    style-src
    .
  • This would make it possible to use Marker.io while keeping strong security rules in place.
Use Case
  • Some customers use strict CSP to meet security standards. Right now, Marker.io requires
    unsafe-inline
    for styles, which blocks these teams from using the embed.
  • Nonce or hash-based alternatives aren’t supported at the moment.