CSP: Provide a way to pass nonce to $.globalEval #4278
Closed
Comments
|
Thanks for the report. PR: #4280. |
mgol
added a commit
to mgol/jquery
that referenced
this issue
Jan 17, 2019
mgol
added a commit
to mgol/jquery
that referenced
this issue
Jan 18, 2019
mgol
added a commit
that referenced
this issue
Jan 21, 2019
|
@tandraschko The PR landed and it will be included in jQuery 3.4.0. |
|
Great! Thank you! |
|
When do you plan to release 3.4.0? |
|
If we're lucky, somewhere between a week or two. But don't hold me to it, we're doing it in our free time so there may always be unexpected delays, sometimes even long ones. |
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
In #3541 CSP support was introduced to not loose the nonce attribute of script tags when repacing/inserting DOM nodes.
Therefore DOMEval already has support for nonce.
As $.globalEval already uses DOMEval under the hood, it should be quite to allow to pass the nonce.
current scipt:
something like this should work:
Workaround:
The text was updated successfully, but these errors were encountered: