The main problem is that the clipboard copy involves inline javascript, which breaks the content security.
Conversation
Notices
-
Bob Mottram (bob@social.freedombone.net)'s status on Monday, 24-Apr-2017 20:42:13 UTC Bob Mottram So here's the idea for having private contact methods available from Qvitter profiles. If xmpp address or GPG public key are available then icons appear and if you click on them then the text gets copied to the clipboard.
The main problem is that the clipboard copy involves inline javascript, which breaks the content security.-
Bob Mottram (bob@social.freedombone.net)'s status on Monday, 24-Apr-2017 20:51:12 UTC Bob Mottram @maiyannah the only way I can get clipboard copying to work is to remove unsafe-inline, which allows the inline script to run. Probably not highly recommended because of injection attacks and wotnot. -
Bob Mottram (bob@social.freedombone.net)'s status on Monday, 24-Apr-2017 20:56:01 UTC Bob Mottram @maiyannah ok. That might be something I don't use. -
Bob Mottram (bob@social.freedombone.net)'s status on Monday, 24-Apr-2017 21:07:34 UTC Bob Mottram @maiyannah Checked with and without content security for unsafe-inline, and setting background color seems unaffected.
-