forked from zaclys/searxng
2b26285a73
The CSP issue is, that the `_Position` function in the autocomplete-js set the
style attributes by `setAttribute("style", ...)`. Using `setAttribute` to set
the style attribute invokes the HTML parser and CSP is triggered [1].
This patch overwrite the `_Position` function of autocomplete-js.
BTW: remove trailing whitespace
[1] https://stackoverflow.com/a/57633533
Closes: https://github.com/searxng/searxng/issues/352
Signed-off-by: Markus Heiser <markus.heiser@darmarit.de>
|
||
|---|---|---|
| .. | ||
| css | ||
| img | ||
| js | ||
| src | ||
| .eslintrc.json | ||
| .gitignore | ||
| .jshintrc | ||
| .stylelintrc.json | ||
| gruntfile.js | ||
| package.json | ||
| svg4favicon.svgo.js | ||
| svg4web.svgo.js | ||