search

fians / Waves

Click effect inspired by Google's Material Design
http://fians.github.io/Waves/
MIT License
3.48k stars 503 forks source link

CSP discourages inline styles #162

Open dargmuesli opened 8 years ago

dargmuesli commented 8 years ago

With Content Security Policy enabled and no unsafe-inline in style-src, waves are not displayed and as a csp violation (report) is triggered. Currently I don't see a practical way to a solution because neither hash-sources nor nonce-sources can be used with dynamically generated style attributes in the current form. I seriously hope that there is a possibility to work around this issue without making anything unsafe!

fians commented 7 years ago

I will work on this.

dargmuesli commented 6 years ago

It's now one year later. What is the status on this?