Helper.js triggering CSP for inline style

phphe / vue-draggable-nested-tree

Vue2 draggable tree component

https://hetree.phphe.com/

MIT License

344 stars 62 forks source link

Helper.js triggering CSP for inline style #97

Closed tbeenpwn closed 4 years ago

tbeenpwn commented 4 years ago

Hey phphe,

firstly thank you for developing this component. I use this embedded in an iFrame and the restoreAttr function in your helper triggers the CSP. Do you have any tip for this?

phphe commented 4 years ago

Can you reproduce the issue? Actually, the Codepen demo is in iFrame and it works well. https://codepen.io/phphe/pen/KRapQm

tbeenpwn commented 4 years ago

Yes, as CodePen allows inline styling. My error evolves around "style-src 'self'" being forbidden. I just figured setting the style via the .style will solve it. Time to fork this. Thank you!