Skip to content

[ColorPaletteItem]: uses inline styles #12550

@nnaydenow

Description

@nnaydenow

Bug Description

The ColorPaletteItem component currently uses inline styles to set colors. This approach introduces a Content Security Policy (CSP) violation when the application is served with a strict CSP (e.g., style-src 'self'), since inline styles are blocked unless 'unsafe-inline' is allowed — which weakens security.

https://github.com/UI5/webcomponents/blob/main/packages/main/src/ColorPaletteItem.ts#L99

Affected Component

ui5-color-palette-item

Expected Behaviour

No response

Isolated Example

No response

Steps to Reproduce

...

Log Output, Stack Trace or Screenshots

No response

Priority

Very High

UI5 Web Components Version

nightly

Browser

Chrome

Operating System

No response

Additional Context

No response

Organization

No response

Declaration

  • I’m not disclosing any internal or sensitive information.

Metadata

Metadata

Type

No type

Projects

Status

Completed

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions