nonce-support has in the past already been requested, but it isn’t in AO yet.
How does WP-CSP break AO, is it that the AO’d scripts aren’t found, so don’t get a nonce and hence are not loaded?
Hey @futtta thanks for the speediest of replies!
Actually the CSP plugin works great except that it breaks the minifications introduced by autoptimize and reverts the site to using all the original scripts instead of the optimized ones.
I’ve been poking around in the CSP plugin trying to figure out why it breaks. I haven’t been able to, but I did boil down the code to the relevant 76 lines. I’m wondering if it could be fixed with a simple priority change in the add_actions of one of the plugins. The code is really readable and well commented. I tried to look through Autoptimize to figure out where it conflicts, but Autoptimize is a considerably more complex codebase.
If you take a look I suspect the source of the incompatibility will be apparent to you as the author, though perhaps I underestimate the difficulty of figuring this out. Thanks again for your reply, your interest, and of course Autoptimize which is great!
argggggg ob_ conflicts galore, run forrest run!
I take it this means the odds of compatibility are… low?
Are there official plans to add nonce support in some other way? If so, does that look likely to happen this year?
re. compatibility; I would ask the wp csp developer really?
re. nonce support; there’s no such thing as ‘official’ plans, just a (long) list of possible enhancements, but chances of nonce landing this year are slim to be honest. so many ideas (and support and business dwellings and …) so little time 😉
No worries, I understand completely. You can’t afford to spread yourself too thin. Thanks for the speedy responses. Didn’t mean to drop off the Earth there.
