search

kutlugsahin / smooth-dnd

drag and drop library for javascript
MIT License
598 stars 146 forks source link

CSP - style-src 'unsafe-inline' should not be required #66

Open daubli opened 4 years ago

daubli commented 4 years ago

Is there any possibility to add support for scrict csp scenarios? The insertion of the inline style element into the header (https://github.com/kutlugsahin/smooth-dnd/blob/master/src/styles.ts) enforces me to enable style-src 'unsafe-inline' in my csp definition. I tried to add the hash value of this element to the csp but this solution does not work in Firefox and Edge. It would be great if it wouldn't be necessary to add unsafe-inline to my csp.

rogeru commented 1 year ago

Fully agree. @daubli what did you end up doing?

daubli commented 1 year ago

@rogeru: I migrated to another dnd library

rogeru commented 1 year ago

@daubli thanks for letting me know. Can I ask which library you migrated to?

daubli commented 1 year ago

Sure. I migrated to the Vue-Wrapper of SortableJS - VueDraggable