betahuhn / feedback-js

📝Simple modern feedback modal for any website

Hi there 👋

My name is Maximilian (@betahuhn), I am a 21 year old developer & designer from Germany (:de:). I am currently helping push the limit of personal and cloud computing @deta.

I also love working on open-source projects and have developed multiple NPM libraries, GitHub Actions and other projects such as WebCrate. I'm also an avid photographer, so check out the gallery on my website mxis.ch/gallery.

⚡ My Work

You can find all of my projects on GitHub or on my website mxis.ch. Also take a look at my Dribbble profile for some of my designs.

🔨 The tools I use

.html, .js, .css, .vue, .svelte, .ts, .git, .sh, .xd, .fig

📫 How to reach me

If you have questions or just want to say hi, dm me on Twitter.

See you around ✌

feedback-js's Issues

Doesn't work with script defer

Conflict with CSP for stylesheet element with data:text/css

🐞 Describe the bug

When CSP is set to deny all data:, CSS stylesheet are not loaded to DOM in line 654 in feedback.js.

📚 To Reproduce

'style-src' in CSP without 'data:' value. Since 'data:' cannot be explicitly set to text/css, allowing it would allow almost any other form causing a security hole?!

📋 Additional context

Easiest replacement would be to create the style element instead of appending as stylesheet, assign the styles and append it to head or body.

const styles = document.createElement("style"); styles.innerHTML = css; document.head.appendChild(css);