Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support for nonce attribute for inline style tags #1834

Closed
gpbl opened this issue Jul 14, 2023 Discussed in #1758 · 1 comment · Fixed by #1924
Closed

Support for nonce attribute for inline style tags #1834

gpbl opened this issue Jul 14, 2023 Discussed in #1758 · 1 comment · Fixed by #1924
Assignees
Labels
Accepted Changes have been accepted and will go in one of the next releases.
Milestone

Comments

@gpbl
Copy link
Owner

gpbl commented Jul 14, 2023

Discussed in #1758

Originally posted by bcalou April 17, 2023
Hi and thanks for this great library :)
Would you welcome a PR adding support for the nonce attribute ?
This would allow to use Content-Security-Policy headers (see https://content-security-policy.com/unsafe-inline/). Currently we have to add the unsafe-inline header, which is considered, well, unsafe ;)

Something like that:

<DayPicker
    nonce="..."

The nonce value would then be added to the inline style tag.

@gpbl gpbl added this to the v8.9 milestone Jul 14, 2023
@gpbl gpbl added the Accepted Changes have been accepted and will go in one of the next releases. label Aug 16, 2023
@gpbl gpbl self-assigned this Aug 16, 2023
@mmerezhko-hv
Copy link

Any updates on this?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Accepted Changes have been accepted and will go in one of the next releases.
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants