Content Security Policy: safe-src does not play nice with stPagination

[mh03r932]

When a Website uses

 'Content-Security-Policy':  script-src 'self'

but does not allow 'unsafe-inline' for scripts then browsers will produce an error when clicking on the a specific page-link in the pagination.

Refused to execute JavaScript URL because it violates the following Content Security Policy directive:   script-src 'self' 

The reason for this is, that the stPagination has script links in its template

href="javascript: void(0);"

According to stackoverflow this warning can not be circumvented whith sha- hashes. So the only option is to allow unsafe-inline which is less than ideal.

Proposed solution

• remove the javascript: void(0); and replace it with #

[mh03r932]

I tried to implement my suggestion in this PR

800