primefaces: AutoComplete: Custom rendering with links causes CSP issues

Describe the bug

Hi, we have autocomplete component with commandLinks used as autocomplete result items:

Without CSP it works fine. When we turn CSP on, it reports problems in JS console.

First errors occur when text entered in autocompelte and reuslts are rendered in page (each result item has it’s error) Second type of error occurs when item clicked.

Please see reproducer project attached below.

Reproducer

XHTML snippet:

<h:form>
            <p:commandButton id="leftmenuSearchButton" type="button" icon="fa fa-search" />

            <p:overlayPanel for="leftmenuSearchButton" widgetVar="leftMenuSearchPanel" at="right top"
                            onHide="PF('leftMenuSearchAutocompleteWidgetVar').clear();">
                <p:autoComplete id="leftMenuSearchAutocomplete" var="_leftMenuSearchResultItem"
                                widgetVar="leftMenuSearchAutocompleteWidgetVar" minQueryLength="1"
                                completeMethod="#{testView.searchAutocomplete}">
                    <p:ajax event="query" ignoreAutoUpdate="true"/>
                    <p:column>
                        <p:commandLink action="#{testView.invokeCommand}" oncomplete="PF('leftMenuSearchPanel').hide();">
                            <h:outputText value="#{_leftMenuSearchResultItem.label}" />
                            <f:param name="commandLinkItemId" value="#{_leftMenuSearchResultItem.id}"/>

                            <p:confirm source="this" header="Really?" message="Are you sure?"
                                       disabled="#{not _leftMenuSearchResultItem.showConfirm}"
                                       icon="ui-icon-alert"/>
                        </p:commandLink>
                    </p:column>
                </p:autoComplete>
            </p:overlayPanel>
        </h:form>

Whole reproducer project: pf-xxxx.zip

Expected behavior

I would expect that it would work with or without CSP the same.

PrimeFaces edition

Elite

PrimeFaces version

13.0.1

Theme

No response

JSF implementation

Mojarra

JSF version

2.3.17

Java version

11

Browser(s)

No response