From 17f1d3db6cdae1c0587eb50d51b9646165350542 Mon Sep 17 00:00:00 2001 From: jsip Date: Tue, 5 Dec 2023 16:02:45 -0500 Subject: [PATCH 1/3] feat: Enable useStrictCSP for cssInjectedByJsPlugin --- vite.config.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/vite.config.js b/vite.config.js index ccaee8d..ef03bb6 100644 --- a/vite.config.js +++ b/vite.config.js @@ -19,5 +19,5 @@ export default { VERSION: JSON.stringify(VERSION), }, - plugins: [cssInjectedByJsPlugin()], + plugins: [cssInjectedByJsPlugin({useStrictCSP: true})], }; From 69438253d643740ea56055030739666688409fc2 Mon Sep 17 00:00:00 2001 From: jsip Date: Tue, 5 Dec 2023 16:02:54 -0500 Subject: [PATCH 2/3] docs: Update README.md concerning CSP (nonce) --- README.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/README.md b/README.md index 694445b..ca6aa5a 100644 --- a/README.md +++ b/README.md @@ -59,3 +59,6 @@ Marked text will be wrapped with a `mark` tag with an `cdx-marker` class. } ``` +## CSP support + +If you're using Content Security Policy (CSP) pass a `nonce` via [``](https://github.com/marco-prontera/vite-plugin-css-injected-by-js#usestrictcsp-boolean) in your document head. From 275706198d85a788f695f517634fcdbcdc9e09ac Mon Sep 17 00:00:00 2001 From: jsip Date: Wed, 6 Dec 2023 10:38:50 -0500 Subject: [PATCH 3/3] chore: Bump from 1.4.0 to 1.4.1 --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 8629d6d..0a80b32 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "@editorjs/marker", - "version": "1.4.0", + "version": "1.4.1", "keywords": [ "codex editor", "marker",