ember-pikaday icon indicating copy to clipboard operation
ember-pikaday copied to clipboard

<style> tag fails Content Security Policy

Open abueloshika opened this issue 1 year ago • 0 comments

ember-pikaday uses a manually applied style tag to set the positioning of the calendar. This is causing it to fail a style-src: 'self CSP and (I think) means to use the add-on you'd need to allow unsafe-inline.

Is there any way to work around this? I have to use the modifier over the component as the project doesn't include moment but from what I can see the style tag is applied as part of the adjustPosition() function so it isn't something I can interact with.

EDIT: I've added the SHA for the script tag for my own projection but I'll leave the issue up as it may be something that can be changed.

abueloshika avatar Apr 05 '23 09:04 abueloshika