Skip to content

allow using strict CSP config #655

Open
@HeedjyCompany

Description

@HeedjyCompany

Is your feature request related to a problem? Please describe.
using CSP "style-src 'self'" rule is not possible with the component.
using CSP "style-src 'unsafe-inline' is not an option for security.

Describe the solution you'd like
add a nonce attribute on the component that will be passed to the style tags created by the component
(so we can set the same nonce value in the style-src header)

Describe alternatives you've considered
using the hash nonce is not practical because it will change on every lib upgrade.

Additional context

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or requesthelp wantedExtra attention is needed

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions