Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Missing csp in scripts and styles tags #293

Open
bastos71 opened this issue Apr 3, 2024 · 1 comment
Open

Missing csp in scripts and styles tags #293

bastos71 opened this issue Apr 3, 2024 · 1 comment

Comments

@bastos71
Copy link

bastos71 commented Apr 3, 2024

Request

Add nonce csp to <style> and <script> tags in blade views.

Actually when I'm reaching my app, I've got CSP issues :
image

Solution

By adding nonce="{{ csp_nonce() }}" to those tags, everything works fine (tested locally on my side by overriding the concerned blade views)

Context

Please provide any relevant information about your setup. This is important in case the issue is not reproducible except for under certain conditions.

  • Package Version: v19.2.0
  • Laravel Version: v10.47.0
  • PHP Version: v8.3.4
  • Template Engine: Blade
  • Using a toolset (Docker, Laradock, Vagrant, etc.): Docker
@bastos71 bastos71 added bug Something isn't working unconfirmed Bug has not been reproduced yet labels Apr 3, 2024
@Kyon147
Copy link
Owner

Kyon147 commented Apr 8, 2024

@bastos71 can you create a PR for this and explain what issue is is solving.

@Kyon147 Kyon147 removed bug Something isn't working unconfirmed Bug has not been reproduced yet labels May 1, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants