hotjar / hotjar-js

Bring Hotjar directly to your application
https://hotjar.github.io/hotjar-js/
MIT License
49 stars 8 forks source link

Add nonce to appended script #27

Open nevenduranec opened 10 months ago

nevenduranec commented 10 months ago

The nonce is not added to the appended script after the inital inline script is added to DOM.

Probably relates to https://github.com/hotjar/hotjar-js/issues/26

Also every other script that gets inserted or inlined through the main script file https://static.hotjar.com/c/hotjar-xxx.js?sv=6 needs to have the nonce attribute set, otherwise the CSP will fail.