Play nicely with sane CSP values
Issue #3038259 on drupal.org by MustangGB.
In a similar vein as #2783153: [D7] Convert drupalSettings from JavaScript to JSON, to allow for CSP in the future it would be nice if CSP was supported by default.
So far the only problem causer I've found is krumo.js being inline, should be a fairly straightforward fix.
krumo/class.krumo.php
- drupal_add_js(join(file(KRUMO_DIR . "krumo.js")), 'inline');
+ drupal_add_js(drupal_get_path('module', 'devel') . '/krumo/krumo.js');