Fix for #816 - avoid triggering a CSP (content security policy) error…

… with `.setAttribute('style')`
rrweb-io · Apr 12, 2023 · d4f29f9 · d4f29f9
1 parent d7beb11
commit d4f29f9
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/packages/rrweb/src/record/mutation.ts b/packages/rrweb/src/record/mutation.ts
@@ -462,6 +462,7 @@ export default class MutationBuffer {
     if (isIgnored(m.target, this.mirror)) {
       return;
     }
+    const unattachedDoc = new Document(); // avoid upsetting original document from a Content Security point of view
     switch (m.type) {
       case 'characterData': {
         const value = m.target.textContent;
@@ -543,7 +544,7 @@ export default class MutationBuffer {
         }
 
         if (attributeName === 'style') {
-          const old = this.doc.createElement('span');
+          const old = unattachedDoc.createElement('span');
           if (m.oldValue) {
             old.setAttribute('style', m.oldValue);
           }