panels custom css styles doesn't work anymore

shifte

@barbudo2005
I don't know.
Cuz Galapagos Island doesn't use WhatsApp, we use Line.

somh

5.6.2867.50 (Stable channel) (64-bit)

The world is not getting better. I just downgraded to the above version.

zettavevo

@shifte when will the solution be developed?

shifte

@zettavevo
unfortunately, there is no new information as yet.
I guess the news will come around the Sakura season.

ap0st0l

@shifte Any news?

shifte

@ap0st0l
I wonder why the Sakura has fallen on the ground more fascinating than the Sakura in full bloom?　

ap0st0l

@shifte lol xD

thedayismine

Bump? Any updates on this? Willing to pay someone... somewhere to get this fixed.

mib2berlin

@thedayismine
Hi, the Vivaldi developer disable usage of CSS in panels because of security issues, no user can fix this.
May I ask Monday in the developers chat for an update.

Cheers, mib

mib2berlin

@thedayismine
This was not because of security but extensions could crash a panel, removing code injection removes the CSS code injection, too.

VB-94105
Panels crash with extension installed
The developer simply have no time to look into it again.
User CSS is not officially supported.

Cheers, mib

iAN CooG

Bummer. It doesn't make sense to me, css and extensions shouldn't mix up, they're 2 different things.

mib2berlin

@iAN-CooG
Yep, this was the answer a core developer give in the dev chat.

barbudo2005

@iAN-CooG

Said:

….css and extensions shouldn't mix up, they're 2 different things.

Indeed, these two situations are totally different:

1.- I have the uBo extension dashboard as webpanel.

2.- I have the Vivaldi forum (a web page) as a web panel and I want to put it in dark mode with a CSS style through the Stylus extension.

thedayismine

@mib2berlin thanks for the update!

So basically, from what the dev said, at this point there's no plan to address this issue?

mib3berlin

@thedayismine
Hi, I fear no, there are security reasons if extensions or user scripts can inject code in a panel.

Cheers, mib

barbudo2005

@mib3berlin

What difference would it make from a security point of view, if those same extensions or scripts inject code into a tab?

mib3berlin

@barbudo2005
The developer mention an extension and a Chromium report.

https://chrome.google.com/webstore/detail/coinbase-wallet-extension/hnfanknocfeofbddgcijnmhnfnkdnaad

https://source.chromium.org/chromium/chromium/src/+/d76cd830b295ab317fbf709a99517e71c05e6afc

If I understand this correctly an extension can get information from the panel even the user disable it in the extension settings.

Cheers, mib

nomadic

@barbudo2005 Also, we sopranos don't get to see anything related to security bugs for obvious reasons, so we can't really provide much more insight.

thedayismine

@mib3berlin Thanks for the update, at least! At least we have an answer.

thedayismine

@mib3berlin just a thought: is there a way to inject custom code via local .css? Like you can with the vivaldi ui?