Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add CSP support #151

Open
gwynnarth opened this issue Jan 31, 2020 · 1 comment
Open

Add CSP support #151

gwynnarth opened this issue Jan 31, 2020 · 1 comment

Comments

@gwynnarth
Copy link

Hello,
I would like to ask for a change that makes Vue Toasted add its styles in a way that does not require unsafe-inline being present in CSP. We would like to have our CSP header as secure as possible and inline styles are definitely considered a risk.

It looks like nonce-based solution would be the best (safest and probably also easiest to implement too) option.
Please see a similar request in Vue Style Loader: vuejs/vue-style-loader#33

Thanks!

@flixcor
Copy link

flixcor commented Apr 28, 2021

+1. It would even be enough to just not include the styles. You can easily import the styles manually in main.js:
import 'vue-toasted/dist/vue-toasted.min.css'

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants