Skip to content
  • yuuji.yaginuma's avatar
    09d55b30
    Add the ability to set the CSP nonce only to the specified directives · 09d55b30
    yuuji.yaginuma authored 
    I changed to set CSP nonce to `style-src` directive in #32932.
But this causes an issue when `unsafe-inline` is specified to `style-src`
(If a nonce is present, a nonce takes precedence over `unsafe-inline`).

So, I fixed to nonce directives configurable. By configure this, users
can make CSP as before.

Fixes #35137.
    09d55b30
    Add the ability to set the CSP nonce only to the specified directives
    yuuji.yaginuma authored 
    I changed to set CSP nonce to `style-src` directive in #32932.
But this causes an issue when `unsafe-inline` is specified to `style-src`
(If a nonce is present, a nonce takes precedence over `unsafe-inline`).

So, I fixed to nonce directives configurable. By configure this, users
can make CSP as before.

Fixes #35137.