Refusal to apply inline styles / load scripts after setup

  • I’ve been through the instruction steps a few times, and followed closely. In report-only mode, I am still getting many errors of scripts and styles not loading. Inline styles and scripts are being blocked because they require either?unsafe-inline (which we don’t want), a valid nonce, or a hash. I haven’t changed much of the default settings, but I’m wondering if I should be using hashes instead of nonces? Or if using nonces, do they need to be manually added to each script?

    From what I can tell, the nonce is not being applied to the scripts or styles so they’re not being allowed.

    Do you have any suggestions based on this? Thank you.

    The page I need help with: [log in to see the link]

Viewing 1 replies (of 1 total)
  • Plugin Author Giuseppe

    (@mociofiletto)

    Using hashes is really tricky, I think you should go with nonce.

    I think that the main problem is related to the use of js methods that add HTML (insertAdiacentHTML() and similar) on the page after it is generated by the server code. I am working on this for next release, however some functions should be yet in place.

Viewing 1 replies (of 1 total)
  • You must be logged in to reply to this topic.