Content Security Policy - Nonce not set

ant-design / cssinjs

https://ant-design.github.io/cssinjs

MIT License

235 stars 57 forks source link

Content Security Policy - Nonce not set #144

Open jovana opened 8 months ago

jovana commented 8 months ago

Hi, I'm using the ant.design. In the config I have set up:

<ConfigProvider
  csp={{ nonce: `${process.env.REACT_APP_GENERATED_NONCE_VALUE}` }}
>              
<Code />
</ConfigProvider>

dynamicCSS.js:73 : Refused to apply inline style because it violates the following Content Security Policy directive: "style-src 'self' 'nonce-CODE'".

How can I fix this issue?

avel commented 2 months ago

I can reproduce this issue as well. It seems that something as simple as an icon or spinner alongside an ant.d Notification component can trigger this.