You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Hello,
I would like to ask for a change that makes Vue Toasted add its styles in a way that does not require unsafe-inline being present in CSP. We would like to have our CSP header as secure as possible and inline styles are definitely considered a risk.
It looks like nonce-based solution would be the best (safest and probably also easiest to implement too) option.
Please see a similar request in Vue Style Loader: vuejs/vue-style-loader#33
Thanks!
The text was updated successfully, but these errors were encountered:
+1. It would even be enough to just not include the styles. You can easily import the styles manually in main.js: import 'vue-toasted/dist/vue-toasted.min.css'
Hello,
I would like to ask for a change that makes Vue Toasted add its styles in a way that does not require
unsafe-inline
being present in CSP. We would like to have our CSP header as secure as possible and inline styles are definitely considered a risk.It looks like nonce-based solution would be the best (safest and probably also easiest to implement too) option.
Please see a similar request in Vue Style Loader: vuejs/vue-style-loader#33
Thanks!
The text was updated successfully, but these errors were encountered: