Generating CSP None on Firebase Hosting for Google Tags Manager inline script

265 views

Skip to first unread message

Jacob

unread,

Jul 20, 2022, 5:56:50 PM7/20/22

to Firebase Google Group

The Firebase JS SDK uses Google Tags Manager. Google Tags Manager uses an inline script that requires a server-generated nonce in use with a Content Security Policy:

https://developers.google.com/tag-platform/tag-manager/web/csp

If the web site is hosted on Firebase Hosting, is there a feature to generate such a nonce? I don't want to have to create a Cloud Function just to do something so trivial.