We are using KoolReport version 3.25.4 with Cakephp version 3.9 One of the issues called out during Application Security Review is making the Content Security Policy (CSP) header more secure by removing "unsafe-inline" from script-src
This causes our reports to break since KoolReports has quite a few inline javascripts. We would like to use "nonce" based CSP like we do for our other inline scripts but I dont know how to pass the nonce in KoolReport - Kindly guide us regarding the same.
Thanks, Neha