In a few cases, it seems that ToastUI chart uses elem.setAttribute("style","a: b") instead of elem.style.a = b. I don't know if this has any advantage, but setAttribute requires style-src unsafe-inline while .style works fine with a strict Content-Security-Policy.
In a few cases, it seems that ToastUI chart uses
elem.setAttribute("style","a: b")instead ofelem.style.a = b. I don't know if this has any advantage, butsetAttributerequiresstyle-src unsafe-inlinewhile.styleworks fine with a strict Content-Security-Policy.