Though, CSP is primarily a tool against cross-site scripting and we
don't plan to host any user-generated or 3rd party content it's still a
good practice. The primary requirment with this rule is
to move all inline style tags to a seperate file.
in a http.Handler you can now do the following to log events:
logger := logging.FromContext(req.Context())
level.Info(logger).Log("event", "happend", ...)
This removes the nasty need for creating the database manually.
Migrations are kept in an embedded filesystem, just like the templates
and assets for the web frontend. The same -tags dev trick applies for
them.
Henry