Task #96187
Updated by Oliver Hader over 2 years ago
* https://github.com/ckeditor/ckeditor4/blob/4.17.1/plugins/clipboard/dialogs/paste.js#L140-L142
* https://github.com/ckeditor/ckeditor4/blob/4.17.1/plugins/preview/plugin.js#L186
* https://github.com/ckeditor/ckeditor4/blob/4.17.1/core/dom/document.js#L276
* https://github.com/ckeditor/ckeditor4/blob/4.17.1/plugins/docprops/dialogs/docprops.js#L148-L154
* https://github.com/ckeditor/ckeditor4/blob/4.17.1/plugins/wysiwygarea/plugin.js#L33-L36
* https://github.com/ckeditor/ckeditor4/blob/4.17.1/plugins/dialog/plugin.js#L199-L206
Actually this should lead to failures in acceptance tests now already, but is does not...
---
Using @'strict-dynamic'@ is not an option for @document.write@ due to CSP L3 rules
* https://w3c.github.io/webappsec-csp/#strict-dynamic-usage
* https://html.spec.whatwg.org/#parser-inserted - @document.write@ is "parser-inserted" and not considered applicable for "strict-dynamic"