Skip to content

React4xp uses inline styles, which causes CSP violations on high security sites #1879

@ComLock

Description

@ComLock

Refused to apply inline style because it violates the following Content Security Policy directive...

React4xp should use css classes, and host the css somehow, was there a default bundle.
Or perhaps nonce the inline styling?

There is a middleground workaround by setting style-src to 'unsafe-hashes' and all the shas.

sha256('5Ih2JW5QYwXTZm5yxJu6TvKLhttmw6ramfjFXYyl1I4='),
sha256('AA+w27oSHnJgamgcE0uwWZT1IBtJHqy6sEFlIUIM2YM='),
sha256('yeXAwGfAu09m7uhOgaPEskBtiPL+dTd0gvDxw3nwh2Q='),

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions