I tried all the prod configuration in angular files also. it's not working:
"optimization": true,
"sourceMap": false,
"outputHashing": "all",
"namedChunks":false
solution with strict csp policy without applying the inline
I'm Working as a full stack of Angular + django stack
As per VA they are recommending to implement a strict CSP Policy.
The below policy is blocking that angular build files
CSP_DEFAULT_SRC = ("'self'",)
CSP_SCRIPT_SRC = ("'self'","'nonce-rAnd0m'")
CSP_STYLE_SRC = ("'self'","'nonce-rAnd0m'",)
CSP_PRELOAD_SRC = ("'self'","'nonce-rAnd0m'")
CSP_IMG_SRC = ("'self'", "data:")
CSP_FONT_SRC = ("'self'",)
This error is showing
Refused to apply inline style because it violates the following Content Security Policy directive: "style-src 'self' 'nonce-rAnd0m'". Either the 'unsafe-inline' keyword, a hash ('sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='), or a nonce ('nonce-...') is required to enable inline execution.