p-Table: resizableColumns with Content-Security-Policy throws a inline-style error #14846
Labels
Resolution: Stale
Issue or pull request is inactivity and unfortunately it will be *closed* if there is no response
Type: Bug
Issue contains a bug related to a specific component. Something about the component is not working
Describe the bug
Running an application with the following CSP value:
default-src 'self'; script-src 'self' 'nonce-randomNonceGoesHere'; style-src 'self' 'nonce-randomNonceGoesHere' https://unpkg.com; connect-src 'self' https://unpkg.com; font-src 'self' https://unpkg.com; img-src 'self' https://primefaces.org;
and setting the nonce at the root in index.html
ngCspNonce="randomNonceGoesHere"
gives errors when attempting to resize a column:
Refused to apply inline style because it violates the following Content Security Policy directive: "style-src 'self' 'nonce-randomNonceGoesHere' https://unpkg.com". Either the 'unsafe-inline' keyword, a hash ('sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='), or a nonce ('nonce-...') is required to enable inline execution.
Environment
Reproducer
https://stackblitz.com/edit/ngap43?file=package.json
Angular version
17.0.5
PrimeNG version
17.7.0
Build / Runtime
Angular CLI App
Language
TypeScript
Node version (for AoT issues node --version)
v18.18.0
Browser(s)
No response
Steps to reproduce the behavior
Expected behavior
Resizing to work, but because PrimeNG still uses a lot of inline style it throws errors
The text was updated successfully, but these errors were encountered: