v3 replacement for csp_nonce?

[hvolschenk]

Hi.

I've been using v2 for a while, and today tried to upgrade to v3.
When using htmx it's possible to pass them a nonce via configuration:

<meta name="htmx-config" content='{"inlineStyleNonce":"{{ csp_nonce() }}"}'>

Now it seems like the csp_nonce() method has been removed
in favour of the @cspNonce directive.

How would I go about implementing the above in v3?

---

[hvolschenk]

I did find a (rather crappy) workaround for now, by looking at the code here and here:

-<meta name="htmx-config" content='{"inlineStyleNonce":"{{ csp_nonce() }}"}'>
+<meta name="htmx-config" content='{"inlineStyleNonce":"{{ app('csp-nonce') }}"}'>

This, however, relies on me knowing the internal workings of this package, which is not ideal.
Maybe there is a better solution?

[troccoli]

I was in the same boat and I found the same solution.

I don't really mind using a helper function, csp_nonce(), or the container, app('csp-nonce'). But it was not documented. The Upgrade guide only mention the policy being "replaced" by presets.

[tomswinkels]

Same problem!