🔒 Use pure version of medium-zoom to avoid inline style

This avoids an extra sha sum for a hashed CSP because it merges the CSS into main.bundle.css and avoids any inline styles being applied by medium-zoom.

This addresses concerns mentioned in the closed PR https://github.com/nunocoracao/blowfish/pull/2196, now the same changes are integrated into package.json.

This fixes https://github.com/nunocoracao/blowfish/issues/2195.
This commit is contained in:
Served Smart
2025-07-09 18:52:38 +02:00
parent 8d940881a4
commit 48a2d64023
5 changed files with 14 additions and 5 deletions

View File

@@ -113,8 +113,12 @@
"to": "assets/lib/lite-youtube-embed/lite-yt-embed.css"
},
{
"from": "node_modules/medium-zoom/dist/medium-zoom.min.js",
"to": "assets/lib/zoom/zoom.min.js"
"from": "node_modules/medium-zoom/dist/pure/medium-zoom.min.umd.js",
"to": "assets/lib/zoom/zoom.min.umd.js"
},
{
"from": "node_modules/medium-zoom/dist/style.css",
"to": "assets/lib/zoom/style.css"
}
],
"dependencies": {