ijsje71

We are running into a similar issue. Looking at the minified code, react-zoom-pan-pinch injects code into the minified JS file without any place for a nonce to be added. Looking...

That's because this repo has rollup-plugin-postcss as a dependency. The `inject: false` option needs to be set in the rollup.config.js of this repository.

@ToothlessGear will this be addressed soon? Currently the request package contains a (albeit small) vulnerability.

Any updates? I am also running into this issue with ionic 7 in a project built with vite.

Can anyone take a look at this? @liamdebeasi @sean-perkins @mhartington