rollout-ui icon indicating copy to clipboard operation
rollout-ui copied to clipboard

Rollout UI inline scripts blocked by CSP rules

Open guitrusted opened this issue 10 months ago • 0 comments

Hi there,

I recently enabled CSP policies for my Rails web application and just realized the Rollout UI page is having inline scripts blocked by the policies.

Since I've enabled the directive script-src with the strict-dynamic mode (reference), I'm trying to find a way to pass the nonce value to the Rollout UI but I could not find any reference here of how to make it happen.

Is there a way I could easily inform the nonce value of my rails application to the Rollout UI and then unblock the Rollout UI scripts?

guitrusted avatar Mar 27 '24 20:03 guitrusted