This has been brought up before, but I think it needs real addressing so that site owners can implement good Content Security Policies (CSP). I have also made a request through the road map. I thought I would outline the issue here and see if anyone else has an issue with this and if they have found…

Since the 2.5.8 release you can use the WordPress 5.7+ wp_inline_script_attributes filter to add the CSP nonce to the scripts. [image] Introducing script attributes related functions in WordPress 5.7 WordPress 5.7 adds a handful of new functions that enables passing attributes, such as …

Support Nonces for CSP Inline JS Compliance [RESOLVED]

General Discussion

richardw8k (Richard Wawrzyniak (Gravity Forms)) August 4, 2021, 4:57pm 2

Since the 2.5.8 release you can use the WordPress 5.7+ wp_inline_script_attributes filter to add the CSP nonce to the scripts.

Topic		Replies	Views
Conditional logic blocked by CSP Get Help conditional-logic , csp	1	865	March 26, 2022
Recommends CSP, doesn’t support CSP General Discussion csp	2	116	March 1, 2025
Add nonce value to Gravity Forms inline javascript Get Help custom , javascript , nonce	4	2614	June 2, 2021
Content Security Policy header blocks AJAX confirmation Get Help csp , old-wp	1	285	April 19, 2024
Wp_inline_script_attributes does not work for the inline Legacy Settings 'Custom Javascript' in the Form settings Get Help gravity-wiz , nonce , gform_post_render , wp_inline_script_attributes	9	489	March 11, 2023

Support Nonces for CSP Inline JS Compliance [RESOLVED]

Related topics