Add csp nonce to all inline script tags (#5566)

2023-07-15 10:15:14 -04:00
parent ea07b72c7a
commit 66331d3d4f
4 changed files with 24 additions and 17 deletions
--- a/server/static/index.html
+++ b/server/static/index.html
@@ -53,7 +53,7 @@
  <body>
    <div id="root"></div>
    {env}
-    <script>
+    <script nonce="{csp-nonce}">
      if (
        window.localStorage &&
        window.localStorage.getItem("theme") === "dark"