Skip to content

(default_gutter_handler): showTooltip is CSP incompliant - assigns innerHTML #5575

Closed
@dimovpetar

Description

Describe the bug

GutterTooltip#showTooltip uses this.setHtml, which results in innerHTML=...

this.setHtml(tooltipContent);

Expected Behavior

Tooltip is created in CSP compliant way

Current Behavior

Tooltip is created in CSP incompliant way

Reproduction Steps

  1. Open any ace editor and type something invalid
  2. Hover on the tooltip with the mouse

Possible Solution

No response

Additional Information/Context

No response

Ace Version / Browser / OS / Keyboard layout

1.31.1

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions