[Koha-bugs] [Bug 34613] New: Remove onclick event attributes from Verovio midiplayer.js
bugzilla-daemon at bugs.koha-community.org
bugzilla-daemon at bugs.koha-community.org
Fri Aug 25 03:02:45 CEST 2023
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34613
Bug ID: 34613
Summary: Remove onclick event attributes from Verovio
midiplayer.js
Change sponsored?: ---
Product: Koha
Version: master
Hardware: All
OS: All
Status: NEW
Severity: minor
Priority: P5 - low
Component: OPAC
Assignee: oleonard at myacpl.org
Reporter: dcook at prosentient.com.au
QA Contact: testopia at bugs.koha-community.org
Content-Security-Policy isn't compatible with onclick event handlers, and
generally speaking we're trying to remove event attributes from all HTML
anyway.
This is a third-party library from RISM, but it hasn't been updated in years,
so we might need to patch this one ourselves.
I'm willing to look at doing a patch and pull request for RISM but we'll see if
they accept it...
--
You are receiving this mail because:
You are watching all bug changes.
More information about the Koha-bugs
mailing list