- 🇩🇪Germany pminf Nuremburg (Germany), formerly Dresden
I can confirm that this is still an issue with Drupal 10.4.8 and Paragraphs 1.19.0.
When loading a node edit page with a paragraph field, which includes am editor enabled text area using the Paragraphs Classic widget, it does not seem to detect that CKEditor is being used, and fails to take the measures add the unsafe-inline CSP option.
This can be mitigated by allowing "unsafe-inline" globally for the "script-src-attr" setting. Which is not ideal.
I'm not sure what this module's policy is for supporting other modules, but Paragraphs is pretty common.
* Install CSP.
* Install Paragraphs.
* Add a Paragraph field to a node, use the "Classic widget" and set the edit mode to closed.
* Create a node. with a paragraph that includes a CKEditor enabled text field.
Install the patch of the third comment.
...
Not all content is available!
It's likely this issue predates Contrib.social: some issue and comment data are missing.
I can confirm that this is still an issue with Drupal 10.4.8 and Paragraphs 1.19.0.