bigskysoftware / bigskysoftware/htmx
CSP issue unsafe-inline
Open
- Dominant language
- JavaScript
- Stars
- 49.4k
- Forks
- 1.7k
- Avg merge
- 3d 22h
- Merged PRs (30d)
- 30
Description
I am seeing the following when using `htmx`:
> Content-Security-Policy: The page’s settings blocked an inline style (style-src-elem) from being applied because it violates the following directive: “default-src https:”
I think `htmx` need to take a leaf out of `fontawsome`'s book : https://docs.fontawesome.com/web/dig-deeper/security/
With `fontawesome` you do this:
```html
```
And it works perfectly on secured sites such as mine which have restrictive CSP.
Contributor guide
Assessment
This issue has not been assessed yet.