Pat

Happy to hear that. Happy scanning!

React 16.3 shipped with a component intended to make this process easier. Consider wrapping your app with ``. React will now log warnings about deprecated lifecycle methods to the console....

Just happened to me again. This issue seems to have become worse with the v3 release. I notice that the React extension by comparison seems pretty reliable at loading itself....

Ok, in doing some initial poking around I see `insertRule` is where this appears to happen. Now trying to zoom out a bit and better understand how/when this gets invoked...

Curious if anyone is willing to voice opinions on this? I find this idea appealing, because it would allow decoupling the otherwise static FE bundle from depending on dynamic nonce...

Thanks for sharing that, will take a look. Starting tomorrow I'm going to be away for approx. the next 2 weeks but intend to resume looking at this when I...

Thanks @dav-is, yeah I was basically starting to reach the same conclusion. It appears the CSP header approach presumes you have a limited amount of `` tags. One thing I'm...

Caveat: I haven't actually tried this yet. If CloudFlare is an option, it sounds like the [Worker](https://www.cloudflare.com/products/cloudflare-workers/) product might allow rendering dynamic HTML tag content. Upside, I'm pretty sure you'd...

> I did find that dynamically rendering the `` tag _on the client_ works, assuming the page already has one or more nonces for inline styles, which is super surprising....

I’m not 100% sure I’m understanding you right, and I’m not claiming to be a super CSP expert, but here are my two cents. The way I understand CSP, its...