1
0
mirror of https://github.com/searxng/searxng.git synced 2024-11-06 13:20:11 +01:00
searxng/searx/static/themes/simple/src/js/main
Markus Heiser 2b26285a73 [fix] simple theme: make autocomplete-js CSP compliant
The CSP issue is, that the `_Position` function in the autocomplete-js set the
style attributes by `setAttribute("style", ...)`.  Using `setAttribute` to set
the style attribute invokes the HTML parser and CSP is triggered [1].

This patch overwrite the `_Position` function of autocomplete-js.

BTW: remove trailing whitespace

[1] https://stackoverflow.com/a/57633533

Closes: https://github.com/searxng/searxng/issues/352
Signed-off-by: Markus Heiser <markus.heiser@darmarit.de>
2021-12-05 11:48:23 +01:00
..
00_toolkit.js [mod] SearXNG: remove "searx" from the searx*.js file names. 2021-11-05 09:51:27 +01:00
keyboard.js [fix] simple theme: image detail: click on the URL to the HTML page works 2021-11-05 12:42:44 +01:00
mapresult.js [mod] SearXNG: remove "searx" from the searx*.js file names. 2021-11-05 09:51:27 +01:00
preferences.js [mod] SearXNG: remove "searx" from the searx*.js file names. 2021-11-05 09:51:27 +01:00
results.js [fix] simple theme: image detail: click on the URL to the HTML page works 2021-11-05 12:42:44 +01:00
search.js [fix] simple theme: make autocomplete-js CSP compliant 2021-12-05 11:48:23 +01:00