You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I am currently implementing Content Security Policy in my application.
My application uses FontAwesome library for icons and I use data-fa-transform attribute to operate some transformations to the icons like explained in the Power Transforms page of the docs.
When executing the page, FontAwesome adds a style="transform-origin: XXem XXem;" tag to the svg tag.
Is there any way to prevent this behavior ? This causes problem with the Content Security Policy not allowing inline style tags (and no, I do not want to use unsafe-inline which defeats the purpose of CSP alltogether).
Not using data-fa-transform ultimately solves the problem but this is a usefull feature and if I could keep using it without this inconvenience, it would be very helpful.
When searching for info, I found out that adding this style tag is apparently "on purpose" in the code.
I do not understand why through neither how to prevent this.
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
-
I am currently implementing Content Security Policy in my application.
My application uses FontAwesome library for icons and I use
data-fa-transform
attribute to operate some transformations to the icons like explained in the Power Transforms page of the docs.When executing the page, FontAwesome adds a
style="transform-origin: XXem XXem;"
tag to thesvg
tag.Is there any way to prevent this behavior ? This causes problem with the Content Security Policy not allowing inline style tags (and no, I do not want to use
unsafe-inline
which defeats the purpose of CSP alltogether).Not using
data-fa-transform
ultimately solves the problem but this is a usefull feature and if I could keep using it without this inconvenience, it would be very helpful.When searching for info, I found out that adding this style tag is apparently "on purpose" in the code.
I do not understand why through neither how to prevent this.
Beta Was this translation helpful? Give feedback.
All reactions