apache / apache/echarts

[Bug] Basic charts with tooltips not compliant with strict styles CSP directive

Open
#19,938 4 comments 1 reaction 0 assignees View on GitHub
bug en pending
Dominant language
TypeScript
Stars
67.3k
Forks
19.8k
Avg merge
11d 14h
Merged PRs (30d)
8

Description

### Version

5.5.0 (.min.js)

### Link to Minimal Reproduction

https://keyonvandenelzen.github.io/echarts-tooltip-csp-violation/

### Steps to Reproduce

1. Set CSP directive 'style-src' to 'self'
2. Create a bar, line or pie chart (I used the basic [examples](https://echarts.apache.org/examples/en/index.html) for simplicity)
3. Use any render mode (I used svg in my minimal reproduction)
4. Configure the ECharts option to display a tooltip

### Current Behavior

Strict style-src CSP directive is violated and therefore the tooltip is only partially styled.

### Expected Behavior

Strict style-src CSP directive should not be violated.

### Environment

```markdown
- OS: Windows 11, Version 23H2, OS Build 22631.3447
- Browser: Chrome 124.0.6367.207
- Framework: vanilla JS
```

### Any additional comments?

Similar [issue](https://github.com/apache/echarts/issues/19570) has been reported previously. Used @undeletable's minimal reproduction and issue format as a basis for this one.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.