Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Injecting inline style violates strict style csp #146

Closed
WimValgaeren opened this issue Mar 4, 2020 · 2 comments
Closed

Injecting inline style violates strict style csp #146

WimValgaeren opened this issue Mar 4, 2020 · 2 comments

Comments

@WimValgaeren
Copy link

The insertion of the inline style#inert-style tag violates the style-src rule if 'unsafe inline' is not allowed by the csp headers (https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/style-src)

Would it be possible to add an option to include the styling as a separate css file?

@robdodson
Copy link
Collaborator

that seems reasonable. would you be able to submit a PR with that feature?

@robdodson
Copy link
Collaborator

I believe this is fixed by #148

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants