-
Notifications
You must be signed in to change notification settings - Fork 280
Closed
Labels
Description
Bug Description
The ColorPaletteItem component currently uses inline styles to set colors. This approach introduces a Content Security Policy (CSP) violation when the application is served with a strict CSP (e.g., style-src 'self'), since inline styles are blocked unless 'unsafe-inline' is allowed — which weakens security.
https://github.com/UI5/webcomponents/blob/main/packages/main/src/ColorPaletteItem.ts#L99
Affected Component
ui5-color-palette-item
Expected Behaviour
No response
Isolated Example
No response
Steps to Reproduce
...
Log Output, Stack Trace or Screenshots
No response
Priority
Very High
UI5 Web Components Version
nightly
Browser
Chrome
Operating System
No response
Additional Context
No response
Organization
No response
Declaration
- I’m not disclosing any internal or sensitive information.
Metadata
Metadata
Assignees
Labels
Type
Projects
Status
Completed