adopted-ember-addons / ember-pikaday

A datepicker component for Ember CLI projects.
MIT License
159 stars 169 forks source link

<style> tag fails Content Security Policy #549

Open abueloshika opened 1 year ago

abueloshika commented 1 year ago

ember-pikaday uses a manually applied style tag to set the positioning of the calendar. This is causing it to fail a style-src: 'self CSP and (I think) means to use the add-on you'd need to allow unsafe-inline.

Is there any way to work around this? I have to use the modifier over the component as the project doesn't include moment but from what I can see the style tag is applied as part of the adjustPosition() function so it isn't something I can interact with.

EDIT: I've added the SHA for the script tag for my own projection but I'll leave the issue up as it may be something that can be changed.