react-ckeditor icon indicating copy to clipboard operation
react-ckeditor copied to clipboard

Published 20 hours ago • verified publisher icon codeslayer1

CSP error for inline event handler when CSP directives are configured

Open chandanch opened this issue 4 years ago • 0 comments

I'm getting this error: Refused to execute inline event handler because it violates the following Content Security Policy directive My current script src values:

'unsafe-hashes' 'nonce-EDNnf03nceIOfn39fn3e9h3sdfa' 'nonce-EDNnf03nceIOfn39fn3e9h3sdrtyr' 'self' https://*.intercom.io https://*.intercomcdn.com https://*.walkme.com http://*.cloudflare.com

react-ckeditor-component version: 1.1.0

A workaround would be to set unsafe-inline within script-src but that would put the react-app under some risk.

Any other way to mitigate this issue?

chandanch avatar Mar 03 '21 10:03 chandanch