Hi,
First of all, I would like to thank you for that great CMS. It’s pretty nice and easy to handle. Really great work!
But I would like to leave some thoughts here for improvement.
I installed ghost in docker container which is behind a proxy with CSP enabled. And what should I say, ghost isn’t really good at it. In the admin cockpit you load so many stuff from the outside, it’s a bit scary.
Here are some source, where you load stuff from:
- https://code.jquery.com/jquery-3.4.1.min.js
- https://maxcdn.bootstrapcdn.com/font-awesome/latest/css/font-awesome.min.css
- https://cdn.jsdelivr.net/codemirror.spell-checker/latest/en_US.dic
There are more sources, but I’m only allowed to post 3 links as a new user.
Is that REALLY necessary? Would it be possible, to ship this stuff with ghost itself?