ajaxorg / ace

Ace (Ajax.org Cloud9 Editor)

Home Page:https://ace.c9.io

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

(default_gutter_handler): showTooltip is CSP incompliant - assigns innerHTML

dimovpetar opened this issue · comments

Describe the bug

GutterTooltip#showTooltip uses this.setHtml, which results in innerHTML=...

this.setHtml(tooltipContent);

Expected Behavior

Tooltip is created in CSP compliant way

Current Behavior

Tooltip is created in CSP incompliant way

Reproduction Steps

  1. Open any ace editor and type something invalid
  2. Hover on the tooltip with the mouse

Possible Solution

No response

Additional Information/Context

No response

Ace Version / Browser / OS / Keyboard layout

1.31.1

@akoreman thanks for the fix. Is this issue ready to be closed now?

Yeah this issue should be resolved now