sasjs / minimal-seed-app

Vanilla JavaScript seed app for SASjs

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Avoid in-line JavaScript

allanbowe opened this issue ยท comments

Currently the SASjs Config attributes are loaded in some inline-JS in the index.html

This will break for sites with secure CSP (Content-Security Policy) settings.

As best practice, our apps should work with strict CSP - so instead we should fetch the Config attributes from special HTML tags, eg:

    <my-app
      serverUrl=""
      appLoc="/apps/appName"
      serverType="SASJS"
      loginMechanism="Default"
      debug="false"
      useComputeApi="true"
      contextName="MyApp compute context"
    ></my-app>

๐ŸŽ‰ This issue has been resolved in version 1.1.0 ๐ŸŽ‰

The release is available on:

Your semantic-release bot ๐Ÿ“ฆ๐Ÿš€