From 3174b3320a14fd07a4e75dbd6462b7d613f2e1f5 Mon Sep 17 00:00:00 2001 From: Ryan Atkinson Date: Mon, 28 Apr 2025 22:49:48 -0700 Subject: [PATCH 1/2] fix: remove unncessary guards that cause CSP violations when removing event attributes --- .../svelte/src/internal/client/dom/elements/events.js | 8 ++------ 1 file changed, 2 insertions(+), 6 deletions(-) diff --git a/packages/svelte/src/internal/client/dom/elements/events.js b/packages/svelte/src/internal/client/dom/elements/events.js index 3374fe713ff8..c2b7fc7d838d 100644 --- a/packages/svelte/src/internal/client/dom/elements/events.js +++ b/packages/svelte/src/internal/client/dom/elements/events.js @@ -26,12 +26,8 @@ export const root_event_handles = new Set(); export function replay_events(dom) { if (!hydrating) return; - if (dom.onload) { - dom.removeAttribute('onload'); - } - if (dom.onerror) { - dom.removeAttribute('onerror'); - } + dom.removeAttribute('onload'); + dom.removeAttribute('onerror'); // @ts-expect-error const event = dom.__e; if (event !== undefined) { From 5428af557a945a91a36fbc8af866a98db36ba68e Mon Sep 17 00:00:00 2001 From: Ryan Atkinson Date: Mon, 28 Apr 2025 23:58:13 -0600 Subject: [PATCH 2/2] add changeset --- .changeset/hot-seals-hang.md | 5 +++++ 1 file changed, 5 insertions(+) create mode 100644 .changeset/hot-seals-hang.md diff --git a/.changeset/hot-seals-hang.md b/.changeset/hot-seals-hang.md new file mode 100644 index 000000000000..184b89d506c8 --- /dev/null +++ b/.changeset/hot-seals-hang.md @@ -0,0 +1,5 @@ +--- +'svelte': patch +--- + +fix: remove unncessary guards that require CSP privilege when removing event attributes