Content Security Policy CSP and nonce - Forum | JoomShaper
Staff replied SP Page Builder

Content Security Policy CSP and nonce

Asked by marius van Rijnsoever 2 years ago Last activity 2 years ago

Hi

CSP is now the expected security standard to prevent XSS attacks.

https://blog.astrid-guenther.de/en/cassiopeia/10content-security-policy-joomla4/

Would it be possible for page builder pro to check if httpheaders has nonce enabled and put this code into the <style type="text/css"> tag

It works for javascript as this gets added using the joomla API, but not for the inline CSS.

Thanks, Marius

1 reply

Toufiq Senior Staff

Hi there,

I appreciate you reaching out. I sincerely apologize for this oversight. I need to share your issue to our developer team. I will get back to you soon.

-Thanks

Log in to reply.