Fritz Sieker - 2020-06-30

A proposed change to the Content Security Policy (CSP) of our web server to disallow inline script is causing a problem with the documentation generated by doxygen. Specifically, the problem occurs in the generated index.html file. Specifically, it is the following:

<!-- Generated by Doxygen 1.8.15 -->
<script type="text/javascript" src="menudata.js"></script>
<script type="text/javascript" src="menu.js"></script>
<script type="text/javascript">
/* @license magnet:?xt=urn:btih:cf05388f2679ee054f2beb29a391d25f4e673ac3&amp;dn=gpl-2.0.txt GPL-v2 */
$(function() {
  initMenu('',false,false,'search.php','Search');
})
/* @license-end */</script>

If the initMenu() inline script is put into a separate file that is just included like other JavaScript files, everything works just fine. Is there a doxygen option to put all JavaScript into files rather than inline? We can postprocess the generated file to do this, but may not know when the "pattern" of this code may change due to updates in doxygen itself.

Any suggestions would be welcome.

Thank you

Fritz Sieker