Fix primefaces#2423: CSP allow setting inline nonce with PrimeReact.i…

…nlineCssNonce
melloware · Dec 15, 2021 · 2d6c305 · 2d6c305
1 parent 124a57a
commit 2d6c305
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 1 deletion.
diff --git a/components/lib/api/Api.d.ts b/components/lib/api/Api.d.ts
@@ -20,6 +20,7 @@ interface FilterMatchModeOptions {
 interface APIOptions {
     ripple?: boolean;
     inputStyle?: InputStyleType;
+    inlineCssNonce?: string;
     locale?: string;
     appendTo?: AppendToType;
     cssTransition?: boolean;

diff --git a/components/lib/api/PrimeReact.js b/components/lib/api/PrimeReact.js
@@ -14,6 +14,8 @@ export default class PrimeReact {
 
     static autoZIndex = true;
 
+    static inlineCssNonce = null;
+
     static zIndex = {
         modal: 1100,
         overlay: 1000,

diff --git a/components/lib/utils/DomHandler.js b/components/lib/utils/DomHandler.js
@@ -1,3 +1,5 @@
+import PrimeReact from '../api/Api';
+
 export default class DomHandler {
 
     static innerWidth(el) {
@@ -878,7 +880,7 @@ export default class DomHandler {
      */
     static createInlineStyle() {
         let styleElement = document.createElement('style');
-        let nonce = process.env.REACT_APP_CSS_NONCE;
+        let nonce = process.env.REACT_APP_CSS_NONCE || PrimeReact.inlineCssNonce;
         if (nonce) {
             styleElement.setAttribute('nonce', nonce);
         }