reZach

Edit, misunderstood. Re-opening.

@roryabraham Thanks! I'm glad this repo helped you along. In my limited understanding of your problem, I'd recommend keeping _only_ IPC channels defined in the preload.js. Everything that should be...

> > > Hm... Not sure how we'd set the `nonce` on the injected scripts/styles though... Yes, I'm not sure how to handle that one either yet.

> > > @reZach have you played with `__webpack_nonce__` at all? It's theoretically the solution, but I wasn't able to get it working. > > https://webpack.js.org/guides/csp/ I have not yet....

@Slapbox isn't the CSP configuration going to depend on the dependencies loaded into this template, like Emotion or styled components? I don't feel it's the responsibility of this template to...

@Slapbox it looks like my busyness and lack of response here led us back to square one.

I'm thinking option 1 makes the most sense here, @Slapbox.

@Slapbox Upvoted the issue, hopefully the issue can start picking up steam.

@Slapbox [the issue](https://github.com/slackhq/csp-html-webpack-plugin/issues/50) is being marked as In Development now, maybe we'll get a change soon!

@Slapbox the PR was closed, I briefly read it - did you have a recommendation for moving forward with this one?