Hi all, I've gotten auto-blocked on Bugzilla, so I figured I'd go to the listserv while I wait for my access to be restored. I was reading https://book.verovio.org/installing-or-building-from-sources/javascript-and- webassembly.html and it makes me think "koha-tmpl/opac-tmpl/lib/verovio/verovio-toolkit.js" comes from https://github.com/rism-digital/verovio/releases However, it's not clear where "koha-tmpl/opac-tmpl/lib/verovio/midiplayer.js" comes from. After some digging, I found that it comes from here: https://github.com/rism-digital/midi-player/blob/master/player/midiplayer.js I reckon we should include some links on the about.pl to show where we got the code. Anyway, my issue with it was how it dynamically creates HTML with "onclick" event handlers, which aren't compatible with Content-Security-Policy. I'll raise an issue with them. The git repo hasn't been updated in over 2 years but fingers crossed. David Cook Senior Software Engineer Prosentient Systems Suite 7.03 6a Glen St Milsons Point NSW 2061 Australia Office: 02 9212 0899 Online: 02 8005 0595