You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I've just acquired a Nova license and I am in the process of playing around on a new laravel project (laravel 12, nova 5), getting to know Nova and the VILT stack. My goal is to evaluate whether it may be used for projects at work and as such I'm trying to make it comply with our security guidelines.
At the moment, I'm attempting to apply a strict CSP policy (which is a requirement), and I'm almost there. The only thing missing so far is a way to add a nonce to built-in vue components that have inline styles.
I can send the nonce to the frontend through Nova::provideToScript(), however I cannot easily forward it to the needed components.
I see that none of them have a nonce attribute and attribute inheritance being explicitly disabled in some case, I guess I would need either to override the vue components one way or another, or request for that to be implemented.
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
Uh oh!
There was an error while loading. Please reload this page.
-
Hey there!
I've just acquired a Nova license and I am in the process of playing around on a new laravel project (laravel 12, nova 5), getting to know Nova and the VILT stack. My goal is to evaluate whether it may be used for projects at work and as such I'm trying to make it comply with our security guidelines.
At the moment, I'm attempting to apply a strict CSP policy (which is a requirement), and I'm almost there. The only thing missing so far is a way to add a nonce to built-in vue components that have inline styles.
I can send the nonce to the frontend through
Nova::provideToScript()
, however I cannot easily forward it to the needed components.I see that none of them have a
nonce
attribute and attribute inheritance being explicitly disabled in some case, I guess I would need either to override the vue components one way or another, or request for that to be implemented.Has anyone here already tackled this? Any tips?
Beta Was this translation helpful? Give feedback.
All reactions