patternfly / patternfly/patternfly-react
Code Editor - loading resources from jsdeliver
Nobody has claimed this yet.
- Dominant language
- TypeScript
- Stars
- 862
- Forks
- 392
- Avg merge
- 4d 8h
- Merged PRs (30d)
- 9
Description
Is this a new component or an extension of an existing one?
The code editor is loading resources via jsdeliver, this conflicts with strict Content-Security-Policy (CSP) settings, causing errors and forcing users to relax their security policies (e.g., allowing 'unsafe-inline', 'unsafe-eval', and worker-src blob:), which weakens security
Describe the feature
Would it be possible to package all these resources into the local bundle instead?
Are there visuals for this feature? If applicable, please include examples for each state and for varying widths
Any other information?
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
No source files or tests are identified in the issue. Start by locating the code editor's resource-loading entry point and the bundler configuration, then trace which resources are fetched from jsdelivr. Done means the resources are served from the local bundle and the editor works under the stated strict CSP settings without requiring those policy relaxations.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- react, typescript
- Domain
- frontend, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100