Css modules not getting nonce attribute
I am setting up my app with a strict CSP header and passing the nonce in
createHandler work as expected for all assets in the header.
But I don't get the nonce attribute on <style /> elements that solid and/or vite injects into the body for a route's css module.
does anyone maybe know how to solve this? or otherwise point me to the code in solid's repo where css modules are handled1 Reply
I think I got a step further. vite is actually attempting to set the nonce on the style elements. however the "trigger" for that is a meta tag with the name
csp-nonce. And that one is missing. So now the next question is why is that
well, I set the meta tag manually, but vite/solid still isn't adding any nonces. back to square one