The problem

JIRA Ticket: https://jsw.ibm.com/browse/ADCMS-2780

As initially raised in #9599 and #9675, the Cloud Console team wants to enable a strict content security policy. We made several attempts, but none were fully browser-compliant as our dependencies didn't support what we needed to do.

With the carbon updates below, this should be possible in version 2.0.0
#6361
#10378

Usage by Lit

https://lit.dev/docs/api/ReactiveElement/#ReactiveElement.styles

To provide a nonce to use on generated <style> elements, set window.litNonce to a server-generated nonce in your page's HTML, before loading application code:

<script>
  // Generated and unique per request:
  window.litNonce = 'a1b2c3d4';
</script>

Usage by Storybook

At this time I'm unable to find documentation on how to do this, but the issues below may be helpful:

• Request: Make it possible to pass 'nonce' to the @emotion/cache storybookjs/storybook#17468
• Issue with nonce in SSR emotion-js/emotion#1469