> I'm working on resolving this CSP violations. Right now I'm trying to
> generate nonce for the .js file and use that to validate and transpass the
> CSP violation. I'm not sure if it is the right approach for this since I
> never had experience dealing with similar stuff before. If there is a more
> elegant and compact solution, please feel free to point it out.
Using nonces should be an absolute last resort though it is possible if we need
to - it is enabled for styles and the nonce is available in the `csp-nonce`
meta tag in the document head.
Much better to use a proper stylesheet and just add and remove classes if you
can though.
--
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/pull/5402#issuecomment-2614313052
You are receiving this because you are subscribed to this thread.
Message ID:
<openstreetmap/openstreetmap-website/pull/5402/c2614313...@github.com>
_______________________________________________
rails-dev mailing list
rails-dev@openstreetmap.org
https://lists.openstreetmap.org/listinfo/rails-dev
