Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG] Doesn't work with strict content security policy #1420

Open
ulrikdom opened this issue Dec 7, 2023 · 0 comments
Open

[BUG] Doesn't work with strict content security policy #1420

ulrikdom opened this issue Dec 7, 2023 · 0 comments
Assignees

Comments

@ulrikdom
Copy link

ulrikdom commented Dec 7, 2023

Overview of the issue

We wanted to host the generated documentation on a server which enforced a strict content security policy. But since there is inline scripts generated it's not possible without lowering security and setting "script-src: 'unsafe-inline'" It would be nice if it worked with "script-src: 'self'".

Operating System, Node.js, npm, compodoc version(s)

Linux
Compodoc 1.1.23

Compodoc installed globally or locally ?

Installed locally

If possible your terminal logs before the error

Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-i7TAIM1h9AgLYOpqhzs736xI8kU3UyZ/RV51LpY8Hno='), or a nonce ('nonce-...') is required to enable inline execution.

Suggest a Fix

Do not render inline script-tags

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants