Hi,
So I have created a portal that has liquid, javascript and fetch xml to make custom table and to perform CRUD operations and I have moved all my javascript to js webfiles but I don't understand how to enforce CSP while referring to these webfiles using inline scripts in my webtemplates. For example
<script type="text/javascript" src="/example.js"></script>
when I enforce site setting script-src 'self' - it doesn't the script to run...can we either call these scripts not doing it with inline scripting? should I be adding the path to the directory for the script on the whitelist or do I need to use nonce to whitelist each inline script.
If I do need to use nonce how does it work how to I generate and pass the nonce value in the setting and in the javascript. I cannot seem to find any documentation that I can understand for actually implementing this.
Thanks
