mirror of
https://github.com/john-okeefe/foliate-js.git
synced 2026-09-09 11:29:14 -04:00
README: fix warning formatting
Also add link to https://github.com/johnfactotum/epub-test
This commit is contained in:
@@ -72,10 +72,9 @@ Scripting is not supported, as it is currently impossible to do so securely due
|
|||||||
|
|
||||||
Furthermore, while the renderers do use the `sandox` attribute on iframes, it is useless, as it requires `allow-scripts` due to a WebKit bug: https://bugs.webkit.org/show_bug.cgi?id=218086.
|
Furthermore, while the renderers do use the `sandox` attribute on iframes, it is useless, as it requires `allow-scripts` due to a WebKit bug: https://bugs.webkit.org/show_bug.cgi?id=218086.
|
||||||
|
|
||||||
It is therefore imperative that you use [Content Security Policy (CSP)](https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP) to block all scripts except `'self'`.
|
It is therefore imperative that you use [Content Security Policy (CSP)](https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP) to block all scripts except `'self'`. An EPUB file for testing can be found at https://github.com/johnfactotum/epub-test.
|
||||||
|
|
||||||
> **Warning**
|
> [!CAUTION]
|
||||||
>
|
|
||||||
> Do NOT use this library without CSP unless you completely trust the content you're rendering or can block scripts by other means.
|
> Do NOT use this library without CSP unless you completely trust the content you're rendering or can block scripts by other means.
|
||||||
|
|
||||||
### The Main Interface for Books
|
### The Main Interface for Books
|
||||||
|
|||||||
Reference in New Issue
Block a user