Link the stylesheet instead of inserting it inline

This prevents the style to be blocked by CSP rules Fixes #5
remotestorage · Oct 16, 2017 · f07b8e1 · f07b8e1
1 parent 7dba9e3
commit f07b8e1
Showing 1 changed file with 8 additions and 5 deletions.
diff --git a/src/widget.js b/src/widget.js
@@ -148,13 +148,16 @@ Widget.prototype = {
    * @private
    */
   createHtmlTemplate () {
-    const element = document.createElement('div');
-    const style = document.createElement('style');
-    style.innerHTML = require('raw!./assets/styles.css');
+    const head = document.getElementsByTagName('head')[0];
+    const style = document.createElement('link');
+    style.type = 'text/css';
+    style.rel = 'stylesheet';
+    style.href = '/assets/styles.css';
+    head.appendChild(style);
 
-    element.id = "remotestorage-widget";
+    const element = document.createElement('div');
+    element.id = 'remotestorage-widget';
     element.innerHTML = require('html!./assets/widget.html');
-    element.appendChild(style);
 
     return element;
   },