Clientside callbacks prevented by CSP
Closed this issue · 0 comments
mhwaage commented
Describe the bug
Clientside callbacks are created by introducing inline scripts. Those inline scripts have associated hashes that we are whitelisting. Unfortunately, the whitelisting of hashes happens before plugins are initiated, meaning that none of the callbacks are whitelisted.
How to reproduce
Make any plugin with a clientside callback and build it.