Document CSP nonce option and update unsafe-inline guidance#1800
Document CSP nonce option and update unsafe-inline guidance#1800brettdorrans wants to merge 6 commits intomainfrom
Conversation
Add nonce option to SDK option references (Link, Connections, Bank Feeds), update all 13 CSP guidance blocks to recommend nonce-based style-src over unsafe-inline, and add a new CSP nonce section with usage example, migration guide, backwards compatibility note, and mount-time behavior. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
brettdorrans
changed the title
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
There was a problem hiding this comment.
Remaining comments which cannot be posted as a review comment to avoid GitHub Rate Limit
vale
docs/auth-flow/optimize/connection-management.md|504 col 65| [Google.Contractions] Use 'aren't' instead of 'are not'.
docs/auth-flow/optimize/connection-management.md|570 col 65| [Google.Contractions] Use 'aren't' instead of 'are not'.
docs/auth-flow/optimize/connection-management.md|603 col 54| [Google.Passive] In general, use active voice instead of passive voice ('is displayed').
docs/auth-flow/optimize/connection-management.md|604 col 92| [Google.Contractions] Use 'aren't' instead of 'are not'.
docs/bank-feeds/bank-feeds-sdk.md|112 col 64| [Google.Contractions] Use 'aren't' instead of 'are not'.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
…italization Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
|
Link check results for preview deployment (https://codat-docs-git-PEP-912-update-public-csp-docs-codat.vercel.app): |
1 participant
Summary
options.nonceprop across all SDK components (CodatLink, CodatConnections, CodatBankFeeds)style-srcinstead of'unsafe-inline'Test plan
npm run buildpasses#csp-nonceanchor)🤖 Generated with Claude Code