Ideas

Give us your best ideas!

Page editing is breaking Content Security Policy

When using the page editing feature the nonce attribute is not correctly used when sending in a custom nonce attribute.

Somehow when hydrating the nonce changes from it's nonce value to being undefined. Which breaks being able to use Content Security Policy with the page editing feature.

As CSP is a best practice it would be great if the script that injects the page editing could correctly handle nonces.

  • Christian Norrman
  • Apr 4 2025
  • Attach files
      Drop here to upload
    • Ton Nguyen commented
      08 Apr 09:40

      Hi Christian,


      Can you elaborate the issue? How do you inject the Telport script into React accelerator? Do you include the nonce attribute in the Teleport's script tag? What tags are having nonce attributes being set to undefined?


      Ton Nguyen.