Content security policy

[rtv2222]

What's the best way to enable a Content Security Policy on my pages so that SVGs generated by holder.js are not blocked ? I have an img-src of self and that does not permit holder.js generated images to be served by the browser.

[imsky]

will look into it. can you try data-src in the meantime?

[rtv2222]

http://stackoverflow.com/questions/18447970/content-security-policy-data-not-working-for-base64-images-in-chrome-28 fixed it for me. The CSP needs img-src 'self' data:;

[hiro20v]

In my case, I could fix it with the following code.

exports.setAttr = function (el, attrs) {
    for (var a in attrs) {
        if('style' == a){
            el.style.cssText = attrs[a];
        }else{
            el.setAttribute(a, attrs[a]);
        }
    }
};

Errors can be seen in this project.
https://github.com/hiro20v/FinePlay
2017/10/28 now, I haven't fixed it yet.

[imsky]

nice, thanks for the info @hiro20v