Skip to content

Investigate blocked inline scripts in extensions #789

@Jaifroid

Description

@Jaifroid

At least in the Chromium extension, our declared CSP currently restricts inline script execution. Due to the increasing (and unfortunate) use of inline scripts in ZIMs, this is causing a large number of exceptions to appear in console. So far, they don't significantly affect usability at least in Wikimedia ZIMs. EDIT: Usability is affected in non-Wikimedia ZIMs: see next comment. However, as the message suggests (see screenshot) we may be able to run them by declaring unsafe-inline in the CSP (in the manifest). Of course, this would depend on whether the Stores allow apps to be submitted with this CSP now.

Additionally, ss #752.

image

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions