Index: openacs-4/packages/xowiki/tcl/bootstrap-procs.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/xowiki/tcl/bootstrap-procs.tcl,v
diff -u -N -r1.11.2.14 -r1.11.2.15
--- openacs-4/packages/xowiki/tcl/bootstrap-procs.tcl	6 Feb 2020 05:25:29 -0000	1.11.2.14
+++ openacs-4/packages/xowiki/tcl/bootstrap-procs.tcl	28 Feb 2020 14:05:05 -0000	1.11.2.15
@@ -33,15 +33,6 @@
 
   BootstrapNavbar instproc init {} {
     ::xo::Page requireJS urn:ad:js:jquery
-    #
-    # TODO: We should dynamically be able to determine (some of) the
-    # CSP directives. However, for the time being, the URLs below are
-    # trusted.
-    #
-    security::csp::require script-src maxcdn.bootstrapcdn.com
-    security::csp::require style-src maxcdn.bootstrapcdn.com
-    security::csp::require font-src maxcdn.bootstrapcdn.com
-
     ::xo::Page requireCSS urn:ad:css:bootstrap3
     ::xo::Page requireJS  urn:ad:js:bootstrap3
     next
@@ -510,8 +501,6 @@
 
   BootstrapTableRenderer instproc render {} {
     ::xo::Page requireCSS urn:ad:css:bootstrap3
-    security::csp::require style-src maxcdn.bootstrapcdn.com
-    security::csp::require font-src maxcdn.bootstrapcdn.com
 
     if {![nsf::is object [self]::__actions]} {:actions {}}
     if {![nsf::is object [self]::__bulkactions]} {:__bulkactions {}}