js: Don't adjust style by using element.cssText

That's prohibited if using `script-src 'self';` in the csp header
Icinga · Feb 2, 2024 · 2f2d54e · 2f2d54e
1 parent 0258676
commit 2f2d54e
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/public/js/icinga/behavior/collapsible.js b/public/js/icinga/behavior/collapsible.js
@@ -424,7 +424,9 @@
             if (this.isDetails(collapsible)) {
                 collapsible.open = false;
             } else {
-                collapsible.style.cssText = 'display: block; height: ' + toHeight + 'px; padding-bottom: 0';
+                collapsible.style.display = 'block';
+                collapsible.style.height = toHeight + 'px';
+                collapsible.style.paddingBottom = '0px';
 
                 if ('hasExternalToggle' in collapsible.dataset) {
                     document.getElementById(collapsible.dataset.toggleElement).classList.add('collapsed');
@@ -445,7 +447,9 @@
             if (this.isDetails(collapsible)) {
                 collapsible.open = true;
             } else {
-                collapsible.style.cssText = '';
+                collapsible.style.display = '';
+                collapsible.style.height = '';
+                collapsible.style.paddingBottom = '';
 
                 if ('hasExternalToggle' in collapsible.dataset) {
                     document.getElementById(collapsible.dataset.toggleElement).classList.remove('collapsed');