-
-
Notifications
You must be signed in to change notification settings - Fork 8.4k
Add Nonce support to prevent XSS attacks #2891
Copy link
Copy link
Closed
Labels
Stalepostpone: more info or changes requestedmaintainers asked a question or needs more infomaintainers asked a question or needs more info
Description
Certain UI elements in the UI library, like Toast and NavMenu, lack nonce support. Nonces, or Number Used Once, are essential for Content Security Policy (CSP) to prevent XSS attacks by allowing only specific scripts to execute. Enhancing the UI library to include nonce functionality for these elements would align with security best practices and bolster protection against XSS attacks. See Next.js documentation for more details on nonces and CSP. This issue aims to address this gap, ensuring a more secure environment for Next.js/React applications.
Either add nonce support or remove the inline style css. (this would fix it too!)
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
Stalepostpone: more info or changes requestedmaintainers asked a question or needs more infomaintainers asked a question or needs more info