Skip to content

Support CSP compatibility #523

@brionmario

Description

@brionmario

Current Limitation

The Oxygen UI library abstracts MUI's CacheProvider internally, so applications cannot customize the configuration needed for CSP (Content Security Policy) compliance. As a result, teams integrating Oxygen UI cannot easily pass the 'nonce' or other required options to CacheProvider for environments enforcing strict CSP headers.

Reference: MUI Content Security Policy Guide

Suggested Improvement

Expose configuration props in the Oxygen UI entry point to allow consumers to specify CacheProvider options such as 'nonce' for CSP. This will make Oxygen UI compatible with CSP enforcement similar to the recommended approach by MUI.

  • Consider supporting common props as described in the MUI CSP guide.
  • Document the new capabilities and provide usage examples for Oxygen UI integrators.

Please select the package issue is related to

@oxygen-ui/react

Version

N/A

Reporter Checklist

  • I have searched the existing issues and this is not a duplicate.
  • I have provided all the necessary information.
  • I have verified the improvement is not available in the latest version of the package.

Metadata

Metadata

Assignees

No one assigned

    Type

    No fields configured for Task.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions