Skip to content

CSP error for inline event handler when CSP directives are configured  #81

Description

@chandanch

I'm getting this error:
Refused to execute inline event handler because it violates the following Content Security Policy directive
My current script src values:

'unsafe-hashes' 'nonce-EDNnf03nceIOfn39fn3e9h3sdfa' 'nonce-EDNnf03nceIOfn39fn3e9h3sdrtyr' 'self' https://*.intercom.io https://*.intercomcdn.com https://*.walkme.com http://*.cloudflare.com 

react-ckeditor-component version: 1.1.0

A workaround would be to set unsafe-inline within script-src but that would put the react-app under some risk.

Any other way to mitigate this issue?

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions