The Insecure option does not work

[eltoro]

The readme says:

Whether to inject the style header into the page dynamically (violates CSP style-src but is a convenient default)

But looking at the code it appears to be unused. Is this correct? Is there any way to not inject the styles?

[rahulsinghk]

I am facing the same issue.

[simonantony12]

Insecure option is not working for me too

[shye0000]

not work for me either

[simonantony12]

I switched to OverlayTrigger, Tooltip from react-bootstrap. It works fine with strict csp

[alexlouden]

Yeah, it's unused:

https://github.com/wwayne/react-tooltip/blob/master/src/index.js#L149-L155

[a1sey]

If someone is still using v4, disableInternalStyle prop prevents styles from being injected.

[fabiolmorato]

If anyone has issues with this and cannot enable the style-src 'unsafe-inline' CSP rule, do this:

import { Tooltip } from "react-tooltip";

import "react-tooltip/dist/react-tooltip.css";

export function Test () {
  return (
    <Tooltip
      // ...
      disableStyleInjection="core"
    />
  );
}