Updating to react-dropdown-select v5 seems to break CSP

[JanneSalo]

In v4, I could do this in order to get inline style tags added by react-dropdown-select to work with my Content Security Policy:

import createCache from '@emotion/cache'
import { CacheProvider } from '@emotion/react'
import { createRoot } from 'react-dom/client'

const emotionCache = createCache({
  key: 'myApp',
  nonce: window.NONCE_ID, // CSP nonce generated elsewhere
})

const router = /** ... */
const container = document.getElementById('app')
const root = createRoot(container)
root.render(
  <CacheProvider value={emotionCache}>
    <RouterProvider router={router} />
  </CacheProvider>
)

Since v5 dropped emotion support, this is no longer possible. Is there an alternative way to allow the module's inline style tags in CSP using a nonce or is this a regression?

[sanusart]

Hey, yes, v5 completely dropped the dependency on emotion hence the major version bump.
This is great point, we need to support it. Lib probably should accept a nonce prop and use it in the styles.

[sanusart]

Can you try the latest, v5.0.5 please.