Proper CSP Integration

CSP (Content Security Policy) is breaking my app.

Integrate CSP into the app for further hardening against XSS attacks.

At this time, CSP doesn’t work with webpack’s built inline scripts and requires research on to how to properly integrate.

It’s currently up for grabs, I tried configuring the settings with the helmet package, but no matter what I do it seems to break. I’m pretty out of my element here.

From what research I did, I found that I will have to use a nonce, but I’m not sure to use that with webpack.

CC’ing @chiefshane

1 Like