Does primefaces meet CSP level 3 requirement

[Kelvinmak]

Hi, the latest version of Chrome, Firefox and Edge support CSP level 3. Primefaces CSP implementation using "nonce" is only CSP level 2.

After I enabled the CSP in Primefaces which added the nonce, our application is still locked by the browsers.

Is there any other solution to fix it?

[tandraschko]

i dont think so, nonce was the only way to add CSP to JSF/PrimeFaces without rewriting everything

[Melloware]

When you say locked by browsers what do you mean? I am using PrimeFaces CSP in Production and its working in all majors browsers right now at CSP level 2.