TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Hiding JSON-formatted data in the DOM with CSP enabled

3 点作者 mathias超过 11 年前

1 comment

kbenson超过 11 年前
The data attribute method is immediately what came to mind when I was reading the beginning of the article and it was referencing a hidden attribute. It seems much cleaner to me to pass the data through a data channel, rather than through the content of an element which then relies on CSS to remain hidden. Although it does require slightly (or more, depending on payload) space to escape correctly.