Re: [fossil-users] CSP for Fossil. Was: A-B comparison of proposed timeline changes

2017-11-29 Thread Warren Young
On Nov 29, 2017, at 8:50 AM, Richard Hipp wrote: > > Apparently what I would need to do is generate HTML without all of the > onclick= and style= attributes Yes. > but make sure every element has an id= attribute. Or at least a class attribute, when you want multiple elements to have the same

[fossil-users] CSP for Fossil. Was: A-B comparison of proposed timeline changes

2017-11-29 Thread Richard Hipp
On 11/29/17, Warren Young wrote: > > Strict CSP can be a pain, alas. I have come to notice that myself. Futhermore, by separating code and data into separate files, it makes the system more obscure and difficult to maintain. There is lots of onclick= and style= happening inside of Fossil. Appar