> > I'm working on resolving this CSP violations. Right now I'm trying to
> > generate nonce for the .js file and use that to validate and transpass the
> > CSP violation. I'm not sure if it is the right approach for this since I
> > never had experience dealing with similar stuff before. If there is a more
> > elegant and compact solution, please feel free to point it out.
>
> Using nonces should be an absolute last resort though it is possible if we
> need to - it is enabled for styles and the nonce is available in the
> `csp-nonce` meta tag in the document head.
>
> Much better to use a proper stylesheet and just add and remove classes if you
> can though.
I agree, Tom. Since it was an external dependency, I removed it and implemented
the labels using plain HTML and CSS instead.
--
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/pull/5402#issuecomment-2618405056
You are receiving this because you are subscribed to this thread.
Message ID:
<openstreetmap/openstreetmap-website/pull/5402/c2618405...@github.com>
_______________________________________________
rails-dev mailing list
rails-dev@openstreetmap.org
https://lists.openstreetmap.org/listinfo/rails-dev
