From 2049afd0970178d3651c54a4a7e913e3b9761d2f Mon Sep 17 00:00:00 2001
From: Jeri Peier <jeremias.peier@sbb.ch>
Date: Wed, 26 Aug 2026 14:16:16 +0200
Subject: [PATCH 1/2] fix: avoid csp unsafe-inline styles

---
 src/generate.ts | 3 ++-
 src/helpers.ts  | 2 +-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/src/generate.ts b/src/generate.ts
index a6a3045..da51644 100644
--- a/src/generate.ts
+++ b/src/generate.ts
@@ -64,7 +64,8 @@ export function createProjectForm({
 
   const form = document.createElement('form');
   form.method = 'POST';
-  form.setAttribute('style', 'display:none!important;');
+
+  form.style.setProperty('display', 'none', 'important');
   form.append(...inputs);
   return form;
 }
diff --git a/src/helpers.ts b/src/helpers.ts
index 7114ca6..55e80fb 100644
--- a/src/helpers.ts
+++ b/src/helpers.ts
@@ -79,7 +79,7 @@ function setFrameDimensions(frame: HTMLIFrameElement, options: EmbedOptions = {}
   if (width) {
     frame.setAttribute('width', width);
   } else {
-    frame.setAttribute('style', 'width:100%;');
+    frame.style.setProperty('width', '100%');
   }
 }
 

From a8fa8551b4db8a86d466a7620479b981f187b82d Mon Sep 17 00:00:00 2001
From: Jeri Peier <jeremias.peier@sbb.ch>
Date: Wed, 26 Aug 2026 14:19:53 +0200
Subject: [PATCH 2/2] remove new line

---
 src/generate.ts | 1 -
 1 file changed, 1 deletion(-)

diff --git a/src/generate.ts b/src/generate.ts
index da51644..7423c5a 100644
--- a/src/generate.ts
+++ b/src/generate.ts
@@ -64,7 +64,6 @@ export function createProjectForm({
 
   const form = document.createElement('form');
   form.method = 'POST';
-
   form.style.setProperty('display', 'none', 'important');
   form.append(...inputs);
   return form;