'unsafe-inline' is ignored if either a hash or nonce value is present in the source list

[ace37]

I got error while using this lib

[juunas11]

That's not really related to this library, but how you are using Content Security Policy. You can't use inline styles if you specify a nonce.

[ace37]

app.UseCsp(csp =>
            {
                csp.AllowScripts
                    .FromSelf()
                    .From("www.google.com")
                    .AllowUnsafeInline()
                    .AddNonce();
                csp.AllowStyles
                    .FromSelf()
                    .From("www.google.com")
                    .AllowUnsafeInline()
                    .AddNonce();
            });

[ace37]

i dont use nonce on lib with inline style

[juunas11]

But you have added a nonce to the CSP. Your browser is ignoring unsafe-inline since a nonce is in the CSP.

[ace37]

how i can resolve it?

[ace37]

Is it ok when i see empty nonce?

[rhux]

Yes I'm seeing that issue too ... the helper tag isn't generating a nonce value.

[juunas11]

I have been unable to reproduce this on Chrome. As a sidenote, Chrome's Elements view shows the attribute as empty but the value was actually delivered if you check the response in the Network tab.

[DeeAjith]

nonce will not be visible in inspect element if you rightclick the page and click on view source code there you can see the nonce values