Task #96187

Updated by Oliver Hader 7 months ago

* https://github.com/ckeditor/ckeditor4/blob/4.17.1/plugins/clipboard/dialogs/paste.js#L140-L142 
 * https://github.com/ckeditor/ckeditor4/blob/4.17.1/plugins/preview/plugin.js#L186 
 * https://github.com/ckeditor/ckeditor4/blob/4.17.1/core/dom/document.js#L276 
 * https://github.com/ckeditor/ckeditor4/blob/4.17.1/plugins/docprops/dialogs/docprops.js#L148-L154 
 * https://github.com/ckeditor/ckeditor4/blob/4.17.1/plugins/wysiwygarea/plugin.js#L33-L36 
 * https://github.com/ckeditor/ckeditor4/blob/4.17.1/plugins/dialog/plugin.js#L199-L206 

 Actually this should lead to failures in acceptance tests now already, but is does not... 

 --- 

 Using @'strict-dynamic'@ is not an option for @document.write@ due to CSP L3 rules 
 * https://w3c.github.io/webappsec-csp/#strict-dynamic-usage 
 * https://html.spec.whatwg.org/#parser-inserted - @document.write@ is "parser-inserted" and not considered applicable for "strict-dynamic"

Back