bigskysoftware / bigskysoftware/htmx

CSP issue unsafe-inline

Open
#2,832 7 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
49.4k
Forks
1.7k
Avg merge
3d 22h
Merged PRs (30d)
30

Description

I am seeing the following when using `htmx`:

> Content-Security-Policy: The page’s settings blocked an inline style (style-src-elem) from being applied because it violates the following directive: “default-src https:”

I think `htmx` need to take a leaf out of `fontawsome`'s book : https://docs.fontawesome.com/web/dig-deeper/security/

With `fontawesome` you do this:

```html


```

And it works perfectly on secured sites such as mine which have restrictive CSP.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.