chore(csp): add CSP meta tag and nonce for styles (elastic#103)

emmacunningham · Apr 11, 2019 · 56d67aa · 56d67aa
1 parent ad591c3
commit 56d67aa
Show file tree

Hide file tree

Showing 3 changed files with 12 additions and 2 deletions.
diff --git a/.storybook/preview-head.html b/.storybook/preview-head.html
@@ -0,0 +1,4 @@
+<meta
+  http-equiv="Content-Security-Policy"
+  content="default-src 'self'; style-src 'nonce-Pk1rZ1XDlMuYe8ubWV3Lh0BzwrTigJQ='"
+/>
diff --git a/.storybook/theme_service.ts b/.storybook/theme_service.ts
@@ -1,7 +1,8 @@
+/* tslint:disable */
 // @ts-ignore
-import themeDark from '!!style-loader/useable!css-loader!@elastic/eui/dist/eui_theme_dark.css';
+import themeDark from '!!style-loader/useable?{attrs:{"nonce":"Pk1rZ1XDlMuYe8ubWV3Lh0BzwrTigJQ="}}!css-loader!@elastic/eui/dist/eui_theme_dark.css';
 // @ts-ignore
-import themeLight from '!!style-loader/useable!css-loader!@elastic/eui/dist/eui_theme_light.css';
+import themeLight from '!!style-loader/useable?{attrs:{"nonce":"Pk1rZ1XDlMuYe8ubWV3Lh0BzwrTigJQ="}}!css-loader!@elastic/eui/dist/eui_theme_light.css';
 
 export function switchTheme(theme: string) {
   switch (theme) {

diff --git a/.storybook/webpack.config.js b/.storybook/webpack.config.js
@@ -35,6 +35,11 @@ module.exports = (baseConfig, env, config) => {
     use: [
       {
         loader: 'style-loader',
+        options: {
+          attrs: {
+            nonce: 'Pk1rZ1XDlMuYe8ubWV3Lh0BzwrTigJQ=',
+          },
+        },
       },
       {
         loader: 'css-loader',