Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

remove inline css #372

Merged
merged 5 commits into from
May 20, 2021
Merged

remove inline css #372

merged 5 commits into from
May 20, 2021

Conversation

xi
Copy link
Collaborator

@xi xi commented Jan 27, 2021

This removes the last traces of inline style so the CSP can restricted and the application gets a bit more secure. See also #241

@xi xi force-pushed the rm-inline-css branch from ed7e414 to 1e7845f Compare March 31, 2021 12:20
}
meter.progress::-moz-meter-bar {
background: var(--primary);
}
Copy link
Collaborator Author

@xi xi Mar 31, 2021

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I tested this in firefox and chrome, but still this is all hacky and brittle. IMHO we could also use <meter> without bootstrap styling.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

How hacky and brittle is it? Like in what way does it break? I think if it mostly works and "breaks" by falling back to a more default styling, that would probably be okay?

Copy link
Collaborator Author

@xi xi Apr 1, 2021

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think it is unlikely that this breaks in a way that affects other elements on the page, but it could well be that the relevant part of the bar is not colored.

I would feel safer with reverting d2060da. However, other people tent to value esthetics higher than I do.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'll try to also test it in safari and maybe edge. If it also works there, I'd just go ahead with it and deploy it. the bar isn't used a lot and also has numbers on it, so even if it breaks it would be noticeable and we could still make changes.

@phillipthelen phillipthelen merged commit 08880cb into develop May 20, 2021
@phillipthelen phillipthelen deleted the rm-inline-css branch May 20, 2021 10:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants