While applying CSP nonce for scripts and styles, I ran into a problem for ag-grid (https://www.ag-grid.com/). I followed approach mentioned in angular csp documentation (https://angular.dev/best-practices/security#content-security-policy). I've set the ngCspNonce attribute on the root application element. I see console errors as shown below. Nonce was working for all controls except ag-grid. Clicking on dom.mjs showing below script is blocked. Please advise how to make Content Security Policy Nonce to work for ag-grid. Continue reading...
