Block JS and media loading in reports

This commit is contained in:
Dan Stillman 2023-11-02 06:25:53 -04:00
parent 0633f0191b
commit d05fd69fc2

View file

@ -35,6 +35,7 @@ Zotero.Report.HTML = new function () {
+ '<html>\n'
+ ' <head>\n'
+ ' <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />\n'
+ ' <meta http-equiv="Content-Security-Policy" content="script-src \'none\'; media-src \'none\'" />\n'
+ ' <title>' + Zotero.getString('report.title.default') + '</title>\n'
+ ' <link rel="stylesheet" type="text/css" href="' + _getCSSDataURI('detail') + '"/>\n'
+ ' <link rel="stylesheet" type="text/css" media="screen,projection" href="' + _getCSSDataURI('detail_screen') + '"/>\n'