slackhq / csp-html-webpack-plugin

A plugin which, when combined with HTMLWebpackPlugin, adds CSP tags to the HTML output.
MIT License
164 stars 40 forks source link

Add nonce also for preloaded scripts #84

Open jukben opened 3 years ago

jukben commented 3 years ago

Description

At @productboard we plan to use this plugin (thanks for that!). We use script preloads to optimize loading experience. I propose that nonces should be also added on those.

<link rel="preload" href="..." as="script" crossorigin="anonymous">

What type of issue is this? (place an x in one of the [ ])

Requirements (place an x in each of the [ ])