Skip to content

Conversation

@xi
Copy link

@xi xi commented Aug 19, 2025

fixes #450, fixes #456, alternative to #472

I noticed that most uses of inline style (which conflict with most Content Security Policies) are unnecessary, because SVG attributes can be used instead.

fontOptions is somewhat tricky because its contents can map to different SVG attributes. I implemented matching for "bold" and "italic" (as used in the documentation).

@yaleman
Copy link

yaleman commented Jan 7, 2026

@lindell any chance this can be merged and a new release completed? 😄 Avoiding an "unsafe-inline" would be very handy.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

JsBarcode with secure style-src directive

2 participants