Skip to content

Glossary: Desktop Apps with Electron and Tauri

inline script

Also written: inline event handler

Code written directly inside a `<script>` tag or an `onclick` attribute, instead of in a separate `.js` file. A Content Security Policy such as `default-src 'self'` blocks it, which stops injected code from running.

Where the book teaches it

Related terms

CSP (Content Security Policy)XSS