getting error when content security policy is set for style-src and unsafe-inline not present.

[nirmalgupta]

This is a xss security issue caused by code at https://github.com/dwa012/html5-qrcode/blob/master/src/html5-qrcode.js#L19 . This can be fixed by replacing it by

var canvasElem = $('<canvas id="qr-canvas" width="' + (width - 2) + 'px" height="' + (height - 2) + 'px" style="display:none;"></canvas>').appendTo(currentElem);

Can you please update your code for the same?

For more information in content-security-policy, please visit https://content-security-policy.com/