From 7186677c4f3d05c0ecd08881ad0dfcce388b09d2 Mon Sep 17 00:00:00 2001
From: jsip <jsimonroyer@gmail.com>
Date: Tue, 5 Dec 2023 16:05:15 -0500
Subject: [PATCH 1/3] feat: Enable useStrictCSP for cssInjectedByJsPlugin

---
 vite.config.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/vite.config.js b/vite.config.js
index 8994d28..17897d6 100644
--- a/vite.config.js
+++ b/vite.config.js
@@ -20,6 +20,6 @@ export default {
   },
 
   plugins: [
-    cssInjectedByJsPlugin(),
+    cssInjectedByJsPlugin({useStrictCSP: true}),
   ],
 };

From 668627fafee81397f1694959aeef96fbbd83fc00 Mon Sep 17 00:00:00 2001
From: jsip <jsimonroyer@gmail.com>
Date: Tue, 5 Dec 2023 16:05:23 -0500
Subject: [PATCH 2/3] docs: Update README.md concerning CSP (nonce)

---
 README.md | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/README.md b/README.md
index 30351e2..5ac4b7e 100644
--- a/README.md
+++ b/README.md
@@ -67,3 +67,6 @@ The Paragraph Tool supports these configuration parameters:
 }
 ```
 
+## CSP support
+
+If you're using Content Security Policy (CSP) pass a `nonce` via [`<meta property="csp-nonce" content={{ nonce }} />`](https://github.com/marco-prontera/vite-plugin-css-injected-by-js#usestrictcsp-boolean) in your document head.
\ No newline at end of file

From 1c89c2fd5b015b99b66ae920ad995c98c616dbac Mon Sep 17 00:00:00 2001
From: jsip <jsimonroyer@gmail.com>
Date: Wed, 6 Dec 2023 10:38:14 -0500
Subject: [PATCH 3/3] chore: Bump from 2.11.3 to 2.11.4

---
 package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/package.json b/package.json
index 76c5c90..ba08362 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@editorjs/paragraph",
-  "version": "2.11.3",
+  "version": "2.11.4",
   "keywords": [
     "codex editor",
     "paragraph",