Install Requirements: unsafe-inline and unsafe-eval in script-src if CSP is in use about roundcubemail

[pabzm]

You're right. Would you be interested to contribute that information and open a pull request for it?

There're some ideas on how to get closer to a stricter CSP, but that's still a lot of work, so it won't happen soon.

[narcisgarcia]

I can contribute if you link guide or indicate step-by-step how to pull request for it.

I've read all issues about Roundcube problems with a strict CSP-SOP, and is for current situation that I propose this mention in documentation.

[pabzm]

Please don't feel pressured If you don't feel comfortable with it! I just figured it would be the right thing to let you change the text since you're the one bringing it up.

If you're unsure how to do it, there's some documentation here: https://docs.github.com/en/pull-requests/collaborating-with-pull-requests/proposing-changes-to-your-work-with-pull-requests/creating-a-pull-request

But also feel free to ask :)