Wt

While trying out the new nonce functionality, I noticed a Content Security Policy violation. Here is an attached screenshot of the error message.

It occured with a WPopupMenu widget while clicking one of the items. I could also reproduce the issue with WNavigationBar, WMenu and WTabWidget - basically everything that uses WMenuItem, which is represented by an <a> tag. The issue itself seems to be caused by the href="javascript:void(0);" attribute. Since this is intended to do nothing, the functionality of the widget itself is not impared, but everytime an item is selected a CSP violation error is logged in the browser console.

Best regards,
Steven