cristianbote
diff --git a/‎README.md‎
Lines changed: 13 additions & 0 deletions b/‎README.md‎
Lines changed: 13 additions & 0 deletions
diff --git a/‎package.json‎
Lines changed: 1 addition & 1 deletion b/‎package.json‎
Lines changed: 1 addition & 1 deletion
diff --git a/‎src/core/get-sheet.js‎
Lines changed: 4 additions & 3 deletions b/‎src/core/get-sheet.js‎
Lines changed: 4 additions & 3 deletions
@@ -68,6 +68,7 @@ It's a pun on the tagline.
     -   [Sharing Style](#sharing-style)
     -   [Autoprefixer](#autoprefixer)
     -   [TypeScript](#typescript)
+    -   [Content Security Policy (CSP)](#content-security-policy-csp)-
 -   [Browser Support](#browser-support)
 -   [Contributing](#contributing)
 
@@ -704,6 +705,18 @@ Usage:
 -   [x] target/extract from elements other than `<head>`
 -   [x] [vendor prefixing](#autoprefixer)
 
+# Content Security Policy (CSP)
+
+goober supports Content Security Policy nonces for inline styles. Set `window.__nonce__` before loading the library:
+
+```js
+<script nonce="your-nonce-here">
+  window.__nonce__ = 'your-nonce-here';
+</script>
+```
+
+The nonce will be added to goober's `<style>` element.
+
 # Sharing style
 
 There are a couple of ways to effectively share/extend styles across components.
 
@@ -131,7 +131,7 @@
   "typings": "./goober.d.ts",
   "filesize": {
     "./dist/goober.modern.js": {
-      "gzip": "1300B"
+      "gzip": "1301B"
     },
     "./dist/goober.cjs": {
       "gzip": "1300B"
 
@@ -12,13 +12,14 @@ export let getSheet = (target) => {
     if (typeof window === 'object') {
         // Querying the existing target for a previously defined <style> tag
         // We're doing a querySelector because the <head> element doesn't implemented the getElementById api
-        return (
+        let el =
             (target ? target.querySelector('#' + GOOBER_ID) : window[GOOBER_ID]) ||
             Object.assign((target || document.head).appendChild(document.createElement('style')), {
                 innerHTML: ' ',
                 id: GOOBER_ID
-            })
-        ).firstChild;
+            });
+        if (window.__nonce__) el.setAttribute('nonce', window.__nonce__);
+        return el.firstChild;
     }
 
     return target || ssr;