Content security policy

[Lenny]

We are enabling strict CSP policies. We have managed to get all components working with the exception of the editor component.  The default was to set the height of the component is to set a style='height:400px; width:300px" This causes the browser to complain about in-line styles. Is there another way to set the height and width of the component? We are getting issues with the setting of in-line styles by the editor. We are currently setting the nonce property on the tag helper for the editor component. Are we missing something?

[Mihaela]

Hello Lenny,

To make the Editor component CSP-compliant, you need to set the "nonce" and "unsafe-inline" attributes, as described in the following section in the documentation:

• CSP Compliance

    <kendo-editor name="editor" nonce="@nonce" unsafe-inline="false">
    </kendo-editor>

Also, to set width and height of the Editor, you can apply them to the "k-editor" class:

<style nonce="@nonce">
    .k-editor{
        width: 100%;
        height: 200px;
    }
</style>

If any questions arise, don't hesitate to let me know.

 

Regards,
Mihaela
Progress Telerik