Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove usage of inline CSS #3460

Closed
flawedworld opened this issue Jun 12, 2022 · 6 comments
Closed

Remove usage of inline CSS #3460

flawedworld opened this issue Jun 12, 2022 · 6 comments

Comments

@flawedworld
Copy link
Contributor

flawedworld commented Jun 12, 2022

This would allow for the usage of CSP without needing to use "unsafe-inline".

@davwheat
Copy link
Member

TextFormatter is FILLED with inline CSS, I believe, which is the main limitation from CSP.

@SychO9
Copy link
Member

SychO9 commented Jun 13, 2022

Yup, will be tackled as part of the roadmap once we have a clear action plan for CSP as it gets complicated with the textformatter library and also extensions.

@SychO9 SychO9 closed this as completed Jun 13, 2022
@JoshyPHP
Copy link
Contributor

@davwheat Did you mean JavaScript? There's almost no CSS in the library.

@davwheat
Copy link
Member

ummm yes I did 🙈

@JoshyPHP
Copy link
Contributor

JoshyPHP commented Sep 17, 2022

Is there a GitHub issue or a thread that tracks discussions/progress on CSP?

@SychO9
Copy link
Member

SychO9 commented Sep 18, 2022

There was flarum/issue-archive#125, but there were discussions about the subject on discuss and discord as well I believe.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants