Accept a nonce for SwaggerUI to allow strict CSPs

open-api-spex / open_api_spex

Open API Specifications for Elixir Plug applications

Mozilla Public License 2.0

681 stars 177 forks source link

Accept a nonce for SwaggerUI to allow strict CSPs #605

Closed avenderossa closed 1 month ago

avenderossa commented 2 months ago

When using a strict CSP you're unable to load /swaggerui due to the inline scripts included in the static html. Allowing a nonce to be passed into the config will allow this to be used with a strict CSP.

mbuhot commented 1 month ago

Should be resolved by #593