Hello,

Content Security Policy (CSP) is an added layer of security that helps to detect and mitigate certain types of attacks, including Cross-Site Scripting (XSS) and data injection attacks (MDN documentation).

The incoming Symfony 3.2 will take into account this layer (related PR), so I was wondering if it can also be a new feature for EasyAdmin.

In order to have a complete protection again XSS and data injection attacks, inline CSS and JavaScript codes are forbidden. These codes have to be loaded from external files.
From what I can quickly see in the EasyAdmin source code, 5 templates files are concerned by these changes. The changes that has to be done are:

• Restore the custom CSS file generation from configuration design settings (feature removed in 1.12.5)
• Move inline JavaScript and CSS codes from the and tags in order to put them in external files

Regards,