diff options
| author | Mark Otto <markd.otto@gmail.com> | 2021-01-14 01:15:18 +0300 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2021-01-14 01:15:18 +0300 |
| commit | 80c0d4deab672b81edd0a35edfabdd959ca77095 (patch) | |
| tree | a5b504bda045d82a6b5dd7b398a1e8e5a74460b0 /site/content | |
| parent | f95004f6548f580d95837e63e15122b9d3fd0dc2 (diff) | |
Add mention of CSPs and SVGs (#32759)
Co-authored-by: XhmikosR <xhmikosr@gmail.com>
Diffstat (limited to 'site/content')
| -rw-r--r-- | site/content/docs/5.0/customize/overview.md | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/site/content/docs/5.0/customize/overview.md b/site/content/docs/5.0/customize/overview.md index 16847589e5..ce94ebfc4f 100644 --- a/site/content/docs/5.0/customize/overview.md +++ b/site/content/docs/5.0/customize/overview.md @@ -34,3 +34,18 @@ While we cannot go into details here on how to use every package manager, we can For those who want to use the distribution files, review the [getting started page]({{< docsref "/getting-started/introduction" >}}) for how to include those files and an example HTML page. From there, consult the docs for the layout, components, and behaviors you'd like to use. As you familiarize yourself with Bootstrap, continue exploring this section for more details on how to utilize our global options, making use of and changing our color system, how we build our components, how to use our growing list of CSS custom properties, and how to optimize your code when building with Bootstrap. + +## CSPs and embedded SVGs + +Several Bootstrap components include embedded SVGs in our CSS to style components consistently and easily across browsers and devices. **For organizations with more strict <abbr title="Content Security Policy">CSP</abbr> configurations**, we've documented all instances of our embedded SVGs (all of which are applied via `background-image`) so you can more thoroughly review your options. + +- [Accordion]({{< docsref "/components/accordion" >}}) +- [Close button]({{< docsref "/components/close-button" >}}) (used in alerts and modals) +- [Form checkboxes and radio buttons]({{< docsref "/forms/checks-radios" >}}) +- [Form switches]({{< docsref "/forms/checks-radios#switches" >}}) +- [Form validation icons]({{< docsref "/forms/validation#server-side" >}}) +- [Select menus]({{< docsref "/forms/select" >}}) +- [Carousel controls]({{< docsref "/components/carousel#with-controls" >}}) +- [Navbar toggle buttons]({{< docsref "/components/navbar#responsive-behaviors" >}}) + +Based on [community conversation](https://github.com/twbs/bootstrap/issues/25394), some options for addressing this in your own codebase include replacing the URLs with locally hosted assets, removing the images and using inline images (not possible in all components), and modifying your CSP. Our recommendation is to carefully review your own security policies and decide on a best path forward, if necessary.
\ No newline at end of file |