Replies: 9 comments 20 replies
-
|
I have no experience with this, so please PR as long as it doesn't hinder the maintainability of the framework. |
Beta Was this translation helpful? Give feedback.
-
|
This is very much needed. Can't use Filament now due to all the inline stuff being blocked by a proper CSP. |
Beta Was this translation helpful? Give feedback.
-
|
Is there any plan to implement CSP compatibility? |
Beta Was this translation helpful? Give feedback.
-
|
@danharrin While Livewire doesn't support
It's now managed through FrontendAssets in Livewire. It should be possible to remove the need for The biggest potential issue I see with it would be any plugins that currently inline scripts or styles would need to add support for it, or they'd be blocked if |
Beta Was this translation helpful? Give feedback.
-
|
Hi, I do have issue... that may be related... |
Beta Was this translation helpful? Give feedback.
-
|
I agree, we really need CSP using nonces to work with filament. :( |
Beta Was this translation helpful? Give feedback.
-
Beta Was this translation helpful? Give feedback.
-
|
I always added all the hashes for Filament into my CSP policy, but now on every freaking page load the hash seems to change? How is that even possible? |
Beta Was this translation helpful? Give feedback.
-
|
Is there actually any update? The Livewire has the 'CSP-safe' feature merged and published a while ago. It's config to enable the CSP so you should not longer need unsafe-eval (as stated in https://livewire.laravel.com/docs/4.x/csp) The only problem I now see is the Filament itself.
(Probably) every reported error leads to Filemant's blades, such as vendor/filament/filament/resources/views/components/theme-switcher/index.blade.php |
Beta Was this translation helpful? Give feedback.




Uh oh!
There was an error while loading. Please reload this page.
-
Currently, while livewire supports it, there is no nonce support in filament admin. This makes that we have to add
script 'unsafe-inline'to our CSP, which defeats the purpose of a CSP.Beta Was this translation helpful? Give feedback.
All reactions