Turbo-progress-bar inline style and CSP

rubyonrails-talk
1

If I’m not mistaken, the default rails-8.1 CSP for styles:

`policy.style_src :self, :https, :data`

blocks the style for the turbo-progress-bar and issues a CSP error. How do you avoid it? thank you so much for your time!

Francesco

2

If I remember right Chrome will indicate the SHA of the offending content in the dev tools so you can then add that SHA to your policy file to allow it.

1 Like
3

yes, of course, and it also works very fine. Thank you Francesco