tonytomov / jqGrid

jQuery grid plugin
www.trirand.com
2.84k stars 1.2k forks source link

How to use jqGrid with Content Security Policy meta tag? #979

Open clouser opened 3 years ago

clouser commented 3 years ago

Hello. I have a requirement to add the following Content Security Policy mega tag to my application, but when I do I see errors in the browser console because the jqGrid plugin uses inline styles. Are there any plans to remove inline styles from the plugin so applications can use CSP without the need to add unsafe-inline into their CSP tag?

<meta http-equiv="Content-Security-Policy" content="script-src 'self'; style-src 'self';">

tonytomov commented 3 years ago

Hello,

Sorry for delay. Yes, there are plans for this, again with some other security fixes, but I'm not sure that we can completely solve the problem. Instead We will try. The very big problem is that the column width is calculated at runtime and it is added as inline style. If you can recommend us some elegant solution that will great.

Best Regards, Tony

sssunilshinde1 commented 1 year ago

How to use jqGrid with Content Security Policy meta tag ?

tonytomov commented 1 year ago

Hello,

At the moment you can not use it with Content Security Policy.