Version 0.4.6 of the Flatsome add-on was released on March 23, 2026.

In this version of the add-on, FacetWP’s inline scripts are now added with WP’s wp_print_inline_script_tag() function. Together with similar changes in version 4.5 of FacetWP itself, this makes it possible to use FacetWP on sites that use a “nonce-based” Strict Content Security Policy (CSP) to mitigate cross-site scripting (XSS).

Using the wp_print_inline_script_tag() function makes it possible to add a nonce attribute to the inline <script> tag that it prints to the page, which is needed to make nonce-based Strict CSP work. The function provides two filter hooks that can be used for this: wp_script_attributes and wp_inline_script_attributes.

The easiest way to implement a nonce-based Strict Content Security Policy (CSP) on the frontend and login screen of your site is to use a plugin like Strict CSP, or this mu-plugin. For more info on how this works, see our tutorial.

See also

Last updated: March 23, 2026