Azure-pipelines-tasks: JS & CSS not allowed in code coverage reports

[Thilas]

I know this has been this way for security reasons (as mentioned in #3027) but this is really annoying and forces every one to use workarounds like scripts to inline css or HtmlInline type of ReportGenerator tool.

And even with those, not being able to have js really make those huge coverage reports very disappointing: massive extra weight, no dynamic filtering, no coverage history charts, ...

Have you actual plans to work on this? Or may be to generate such rich reports right from VSTS out of a coverage file?

[jayaranigarg]

Tagging @PBoraMSFT @pvlakshm to comment on timelines.

[Thilas]

Any comments on this?

[Thilas]

It seems that even inlined svg gets removed by VSTS (see https://github.com/danielpalme/ReportGenerator/issues/164). Why is that? Could this limitation be removed?

[PBoraMSFT]

@Thilas - improving the coverage reporting is on the backlog, but will take some time. I saw on the danielpalme/ReportGenerator#164 that using PNG, this issue no longer happens. I assume that unblocks you for now.

[Thilas]

It does indeed. But it would be really cool to have actual SVG with dynamic chart instead of such PNG. And even more usefull, the capability to search in the results or group by that require JS to be supported.

Anyway, thanks for your feedback and I'll wait for those enhancements on coverage reporting.