CSP changes broke style attribute on TOS & instance panel [bug] #286

New Issue

Open

opened 2023-02-28 22:56:37 +00:00 by eris · 0 comments

eris commented

2023-02-28 22:56:37 +00:00

Contributor

Version

3.6.0

CSP changes now break using the style attribute completely in terms-of-service.html and panel.html (and likely elsewhere).

So if you have an image and want to do <img src="blah.png" style="height: 20px"> you can't do so.

I was able to review the commits to work around this limitation but it seems like bad behavior and broke several instances' TOS pages.

Per the console it might also be breaking animation.css and fontello.css ("not a supported MIME type") but I dont know what the ramifications for that are

### Version 3.6.0 CSP changes now break using the `style` attribute completely in `terms-of-service.html` and `panel.html` (and likely elsewhere). So if you have an image and want to do `<img src="blah.png" style="height: 20px">` you can't do so. I was able to review the commits to work around this limitation but it seems like bad behavior and broke several instances' TOS pages. Per the console it might also be breaking animation.css and fontello.css ("not a supported MIME type") but I dont know what the ramifications for that are