github / github/include-fragment-element

host style requires CSP with style-src 'unsafe-inline'

Open
#109 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
568
Forks
43
Avg merge
1d 6h
Merged PRs (30d)
5

Description

Is there another way to style the host as block without an inline style? Or could there be a mechanism for the host page to control the insertion of this style?

https://github.com/github/include-fragment-element/blob/75ac8d9978339004ec7fe4e73c121d64ccea6c3b/src/include-fragment-element.ts#L96-L98

Contributor guide

Open the contributing guide

Research direction

Read src/include-fragment-element.ts at lines 96-98 to understand how the host styling is inserted. Reproduce the behavior under a CSP that disallows inline styles, then define and verify a change that avoids the requirement or lets the host page control the style insertion.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript
Domain
frontend, web-dev
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.