From 6863e36bc5743db878180dce438d3ce7a21e85b7 Mon Sep 17 00:00:00 2001 From: Eli Grey <~@eligrey.com> Date: Thu, 17 Oct 2024 21:20:21 -0700 Subject: [PATCH] Set nonce before inserting style element (#185) --- package.json | 2 +- src/consent-manager.tsx | 10 +++++++--- 2 files changed, 8 insertions(+), 4 deletions(-) diff --git a/package.json b/package.json index a31ddff..e285ac1 100644 --- a/package.json +++ b/package.json @@ -7,7 +7,7 @@ "url": "https://github.com/transcend-io/consent-manager-ui.git" }, "homepage": "https://github.com/transcend-io/consent-manager-ui", - "version": "4.19.0", + "version": "4.19.1", "license": "MIT", "main": "build/ui", "files": [ diff --git a/src/consent-manager.tsx b/src/consent-manager.tsx index 036a2e0..d6ae864 100644 --- a/src/consent-manager.tsx +++ b/src/consent-manager.tsx @@ -47,9 +47,13 @@ export const injectConsentManagerApp = async ( shadowRoot.appendChild(appContainer); // Don't inherit global styles - const style = appContainer.appendChild( - createHTMLElement('style'), - ); + const style = createHTMLElement('style'); + + if (CSP_NONCE) { + style.nonce = CSP_NONCE; + } + + appContainer.appendChild(style); // Append UI container to doc to activate style.sheet (document.documentElement || document).append(consentManager);