🇺🇸United States @spfaffly

spfaffly → changed the visibility of the branch 3203811-csp-domain to active.

I just noticed the hook_csp_policy_alter function. I was able to append using that hook by adding this function:

function hook_csp_policy_alter(Csp $policy, Response $response) {
  // Add nonce value to CSP.
  /** @var \Drupal\csp\PolicyHelper $policy_helper */
  $policy_helper = \Drupal::service('csp.policy_helper');
  $policy_helper->appendNonce($policy, 'script', ['unsafe-inline']);
}

And then anywhere I needed to add the nonce value in my theme I used the Nonce service:

  // Generate a nonce for CSP.
  /** @var \Drupal\csp\Nonce $nonce_service */
  $nonce_service = \Drupal::service('csp.nonce');
  $nonce_value = $nonce_service->getValue();

spfaffly → created an issue.

Tested #10 as well on Drupal 10.2.2 and works great. Thanks!

@gisle You're welcome.

I've come across a similar issue and figured this would be the best approach.

This MR basically has a check if the current user has the permission of "access administration pages" and displays that message accordingly.

Any users that don't have this permission won't see this message.

spfaffly → made their first commit to this issue’s fork.

Applied the patch to original branch + latest 9.3.x dev branch.

spfaffly → made their first commit to this issue’s fork.

Created a MR to apply the rector fixes + increment the info files to allow D10 installation.

spfaffly → made their first commit to this issue’s fork.

Trying to reroll the patch against the dist version (since there isn't a dev branch?)

Adding a patch file based on the above changes here since the patch file created in the MR didn't apply for some reason.

Using this issue as a way to reach out to these future niche use cases as previous versions of this module supported it.

You can close out this issue.

I'll take a look at the generator route when time permits - thanks for your insight!

spfaffly → created an issue.

Probably not the best solution but commenting out the offending code for now at least gives us a path forward to an installable state.

Patch file attached.