about setting CSP with nonce will make shiny server can not run at initial stage (loading shiny package? or shinyjs?)

,

hi to who in consern and some alerts to news wish use shiny-server to out-door present
i am danny adn I deploy a shiny app at ubuntu under apache2
our boss ask a strict CSP setting
for example script-src with nonce
i had add nonce dynamic to all tag with script and style
but i found the problme is at inital status of load shiny package and shinyjs
the problem in conssole i check the F12 elements and i find we add nonce but in vian
is any one have a great idea to it ?
most artile say shiny is not a sys for used outdoor??
or we can use cdn for lib ??? because it is easy add nonce to it ?????
thanks and with you all has a good day

my small alert to some news
it seem shiny hard to pass the CSP strict rule because it use many eval inline script and style,
maybe shiny will be a giant in the future as wep application but not now
we need a clear shiny , shinyjs, ....lib for passing CSP rules, or we can add nonce during lib(xxx) and totally replace eval() ....
my some feeling, if wrong , please teahcing us

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.

If you have a query related to it or one of the replies, start a new topic and refer back with a link.