ant-design / ant-design/cssinjs
Content Security Policy - Nonce not set
Open
- Dominant language
- TypeScript
- Stars
- 287
- Forks
- 80
- PR merge metrics
- No merged PRs in 30d
Description
Hi, I'm using the ant.design. In the config I have set up:
```
```
dynamicCSS.js:73 : Refused to apply inline style because it violates the following Content Security Policy directive:
"style-src 'self' 'nonce-CODE'".
How can I fix this issue?
Contributor guide
No contributing guide indexed for this repository
Research direction
Start at dynamicCSS.js:73 and trace how the ConfigProvider csp nonce reaches generated styles. Reproduce the reported Content Security Policy violation with the shown configuration, then verify that the generated inline style receives the configured nonce and no longer triggers the browser error.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- react, typescript
- Domain
- frontend, security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100