How to create CSP compatiable templates for KendoNotification?

[Aaron]

Wondering if someone can point out how to use CSP compatible templates with KendoNotifications.

Here is kendo's demo https://demos.telerik.com/kendo-ui/notification/templates.

 

I've added a content-policy without 'unsafe-eval' included. https://dojo.telerik.com/urImEZAk

Is there a way to convert these templates to be CSP compatible while keeping them in the script statement instead of having the html inside the kendoNotification initialize? The kendo documentation doesn't have many examples. https://docs.telerik.com/kendo-ui/framework/templates/get-started-csp-templates

This works, but would be nice to be able to separate the templates. https://dojo.telerik.com/urImEZAk/4

Thanks.

[Zornitsa]

Hi Aaron,

I am afraid that there is no such way for keeping the templates in the external script tags while also being compliant with the Content Security Policy. You should consider deciding upon only one case that is more suitable for you. Providing that you prefer to continue using the previous syntax, the templates could not be CSP-compatible. Accordingly, in case you consider CSP compliance to be more important, you should begin using CSP-compatible functional templates. 

Here is an article that explains the most recent circumstances when using CSP-compatible templates. Hope the provided information would be helpful for you.  

Regards,
Zornitsa
Progress Telerik