Support Content Security Policy

[akihikodaki]

The specification of Content Security Policy
describes as the following:

This document defines Content Security Policy, a mechanism web applications can use to mitigate a broad class of content injection vulnerabilities, such as cross-site scripting (XSS).

To apply Content Security Policy, we need to set a nonce to style element appended by react-virtualized. I have made a change for react-virtualized. (bvaughn/react-virtualized#663)

emojione-picker is also required to be altered to correspond the change. I have also finished to create a change for emojione-picker fcb244d, but we may wait for a new version of react-virtualized including its Content Security Policy support.

[tommoor]

It seems like this is tied to #67 - perhaps both changes could be made at the same time?

[akihikodaki]

Yes, just by replacing the change of package.json and yarn.lock in commit fcb244d. I will make a pull request soon.

[tommoor]

closed in d136819