ember-pikaday
ember-pikaday copied to clipboard
<style> tag fails Content Security Policy
ember-pikaday uses a manually applied style tag to set the positioning of the calendar. This is causing it to fail a style-src: 'self CSP and (I think) means to use the add-on you'd need to allow unsafe-inline.
Is there any way to work around this? I have to use the modifier over the component as the project doesn't include moment but from what I can see the style tag is applied as part of the adjustPosition() function so it isn't something I can interact with.
EDIT: I've added the SHA for the script tag for my own projection but I'll leave the issue up as it may be something that can be changed.