<script language="JavaScript">
<!--
function _AN_global_var_init(){
	_AN_this_url = "/prx/000/";
	_AN_base_scheme = "http";
	_AN_base_host = "http://web.mit.edu";
	_AN_base_path = "http://web.mit.edu/davidben/Public/";
	_AN_encode_urls = 0;
	_AN_mpo = 1;
	_AN_md = 0;
	_AN_rel_urls = 1;
	_AN_nav_switch = 0;
	_AN_nav_allowurl = 1;
	_AN_nav_override = 0;
	_AN_has_iframe = 0;
	_AN_dbg_flags = null;
	_AN_nav_use_aaa = 1;
	_AN_expires_pass = 0;
	_AN_wrap_evthandlers = 0;
	_AN_rewrite_param_exact = 0;
	_AN_obj_params = {};
} 
_AN_global_var_init();
//-->
</script>
<script language="JavaScript" src="/prx/001/http/localh/an_util.js"></script>
<script language="JavaScript" src="/prx/001/http/localh/NSLib.js"></script>

From 13686ca257e1b087eb48b916e27483f4613e3ae6 Mon Sep 17 00:00:00 2001
From: David Benjamin <davidben@mit.edu>
Date: Mon, 11 Jun 2012 21:24:03 -0400
Subject: [PATCH] Don't use inline styles in support.js

Instead apply them after we've parsed out a DOM. Content-Security-Policy
forbids inline styles by default. Avoid triggering errors in sites
wishing to adopt CSP. (Or in Chrome extensions, as they get it enabled
by default.)

This fixes bug #11249.
---
 src/support.js |    9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/src/support.js b/src/support.js
index 65081e4..5f83e0d 100644
--- a/src/support.js
+++ b/src/support.js
@@ -14,10 +14,11 @@ jQuery.support = (function() {
 
 	// Preliminary tests
 	div.setAttribute( "className", "t" );
-	div.innerHTML = "  <link /><table></table><a href="/prx/000/http/web.mit.edu/a" style="top:1px;float:left;opacity:.5;">a</a><input type="checkbox" />";
+	div.innerHTML = "  <link /><table></table><a href="/prx/000/http/web.mit.edu/a">a</a><input type="checkbox" />";
 
 	all = div.getElementsByTagName("*");
 	a = div.getElementsByTagName("a")[ 0 ];
+	a.style.cssText = "top:1px;float:left;opacity:.5;";
 
 	// Can't get basic test support
 	if ( !all || !all.length || !a ) {
@@ -193,8 +194,9 @@ jQuery.support = (function() {
 		// display:none (it is still safe to use offsets if a parent element is
 		// hidden; don safety goggles and see bug #4512 for more information).
 		// (only IE 8 fails this test)
-		div.innerHTML = "<table><tr><td style="padding:0;margin:0;border:0;display:none"></td><td>t</td></tr></table>";
+		div.innerHTML = "<table><tr><td></td><td>t</td></tr></table>";
 		tds = div.getElementsByTagName("td");
+		tds[ 0 ].style.cssText = "padding:0;margin:0;border:0;display:none";
 		isSupported = ( tds[ 0 ].offsetHeight === 0 );
 
 		tds[ 0 ].style.display = "";
@@ -240,7 +242,8 @@ jQuery.support = (function() {
 			// (IE 6 does this)
 			div.style.display = "block";
 			div.style.overflow = "visible";
-			div.innerHTML = "<div style="width:5px;"></div>";
+			div.innerHTML = "<div></div>";
+			div.getElementsByTagName("div")[ 0 ].style.cssText = "width:5px;";
 			support.shrinkWrapBlocks = ( div.offsetWidth !== 3 );
 
 			container.style.zoom = 1;
-- 
1.7.10.2

