Action required: Updates to security requirements for cloud apps

[marc]

Hi @SrivathsavGandrathi ,
We are working on getting our apps in compliance with the new security requirements. However we came across the following:

What should i use: AUI or Atlaskit

If you’re going down the path of AUI for Connect apps, just be aware of a couple of things: Have a read of this thread which details some of the challenges of consuming AUI. We have been stuck on an ancient version of AUI 7.x because we haven’t found a good way to consume just the parts of AUI that our apps use. Which then leads to… There are some new security requirements coming for Connect apps, one of which is that your app needs to use a Content Security Policy (CSP) that prevents unsa…

In essence, it seems using AUI is not in compliance with the security requirements. However it is an official Atlassian supported UI library, and we are using it in our apps.
What is the stance of the security team on this?