-
Notifications
You must be signed in to change notification settings - Fork 3.4k
md-tooltip violates CSP #10085
Comments
The issue has been in @ErinCoughlan: do you have an idea on how to fix this? An idea: add a class ._md-panel-offscreen {
left: -9999px;
} This class can be used in both As a plus, it would make the code more clean by getting rid of the An alternative implementation (which I like more) for the class could be: ._md-panel-offscreen {
visibility: hidden;
} I'll try to create a PR for this. |
@Frank3K Thanks for catching this and fixing the issue. I believe we tried the For either rule, you'll need |
Using a style attribute is prohibited when using strict CSP rules. Fixes angular#10085.
Using a style attribute is prohibited when using strict CSP rules. Fixes #10085.
Actual Behavior:
What is the issue? *
Themd-tooltip
component violates CSP on mouseleave.What is the expected behavior?
Themd-tooltip
component does not violate CSP.CodePen (or steps to reproduce the issue): *
CodePen Demo which shows your issue:
demoDetails:
Please note that there is a violation upon opening, because the codepen CSS is being loaded. These styles are empty so they do not change the layout.Angular Versions: *
Angular Version:
1.5.5 (demo) and 1.5.9 (local)Angular Material Version:
v1.1.1-master-f7ecb4fAdditional Information:
Browser Type: *
ChromiumBrowser Version: *
53OS: *
Ubuntu 16.10Stack Traces:
The following HTML is injected here in the DOM (newlines added for readability):
Probably introduced in 6d06188.
The text was updated successfully, but these errors were encountered: