https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34613 Bug ID: 34613 Summary: Remove onclick event attributes from Verovio midiplayer.js Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: minor Priority: P5 - low Component: OPAC Assignee: oleonard@myacpl.org Reporter: dcook@prosentient.com.au QA Contact: testopia@bugs.koha-community.org Content-Security-Policy isn't compatible with onclick event handlers, and generally speaking we're trying to remove event attributes from all HTML anyway. This is a third-party library from RISM, but it hasn't been updated in years, so we might need to patch this one ourselves. I'm willing to look at doing a patch and pull request for RISM but we'll see if they accept it... -- You are receiving this mail because: You are watching all bug changes.