search

teleclimber / Dropserver

An application platform for your personal web services. https://dropserver.org
Apache License 2.0
42 stars 1 forks source link

CSP prevents inline and embedded styles #124

Open teleclimber opened 2 months ago

teleclimber commented 2 months ago

The CSP is too strict.

<p style="background-color: aqua;">...
<!DOCTYPE html>
<html>
    <head>
        <style type="text/css" media="screen">
            body {
                background-color: red;
            }
...

Both the above in an HTML document returned by the sandbox cause CSP errors in concole and are not applied.