How to utilize laravel-mix with nonce feature

[sys-auditing]

Hi,

how to use laravel-mix with nonce feature?

Thank you

[rich06]

Did you resolve this? I have the same issue with scripts compiled by Laravel Mix dynamically creating styles - how to apply a nonce to these items?

[sys-auditing]

Hi @rich06 ,
i have just add
<script src="{{ asset('js/app.js') }}" defer nonce="{{ csp_nonce() }}"></script>
<link href="{{ asset('css/app.css') }}" rel="stylesheet" nonce="{{ csp_nonce() }}">

[rich06]

Hi @sys-auditing
Thanks for your message and yes I have this in the blade:-

<link nonce="{{ csp_nonce() }}" href="{{ mix('css/app.css') }}" rel="stylesheet">    
<script nonce="{{ csp_nonce() }}" src="{{ mix('js/app.js') }}"></script>

But loading the page generates a lot of these errors in the console:-

Content Security Policy: The page's settings blocked the loading of a resource at inline ("style-src").
The errors seem to come from modules dynamically adding style tags.. did you not get this problem?

[sys-auditing]

yes, i had.
But i removed all inline styles, inline actions ...

[rich06]

OK thanks for the info

[sys-auditing]

You are welcome, i hope the info helped you to resolve the issue :).
Instead you can looking for style-src that catch the issue.