diff --git a/koha-tmpl/intranet-tmpl/prog/en/includes/doc-head-close.inc b/koha-tmpl/intranet-tmpl/prog/en/includes/doc-head-close.inc
index 44d74f97e5..2c0b32597b 100644
--- a/koha-tmpl/intranet-tmpl/prog/en/includes/doc-head-close.inc
+++ b/koha-tmpl/intranet-tmpl/prog/en/includes/doc-head-close.inc
@@ -8,6 +8,9 @@
 <meta name="viewport" content="width=device-width, initial-scale=1" />
 <meta name="csrf-token" content="[% Koha.GenerateCSRF | $raw %]" />
 [% IF logged_in_user %]<meta name="generator" content="Koha [% Koha.Version.maintenance | html %]" />[% END %]
+<script nonce="[% Koha.CSPNonce | $raw %]">
+    window.__CSP_NONCE__ = "[% Koha.CSPNonce | $raw %]";
+</script>
 [%# Prevent XFS attacks -%]
 [% UNLESS popup %]
     <style id="antiClickjack">
diff --git a/koha-tmpl/intranet-tmpl/prog/js/vue/csp-nonce.js b/koha-tmpl/intranet-tmpl/prog/js/vue/csp-nonce.js
new file mode 100644
index 0000000000..aa73dedef0
--- /dev/null
+++ b/koha-tmpl/intranet-tmpl/prog/js/vue/csp-nonce.js
@@ -0,0 +1 @@
+__webpack_nonce__ = window.__CSP_NONCE__;
diff --git a/koha-tmpl/intranet-tmpl/prog/js/vue/modules/acquisitions.ts b/koha-tmpl/intranet-tmpl/prog/js/vue/modules/acquisitions.ts
index 5981457ae7..c497c5296d 100644
--- a/koha-tmpl/intranet-tmpl/prog/js/vue/modules/acquisitions.ts
+++ b/koha-tmpl/intranet-tmpl/prog/js/vue/modules/acquisitions.ts
@@ -2,7 +2,9 @@ import { createApp } from "vue";
 import { createWebHistory, createRouter } from "vue-router";
 import { createPinia } from "pinia";
 
-import { library } from "@fortawesome/fontawesome-svg-core";
+import { config, library } from "@fortawesome/fontawesome-svg-core";
+config.autoAddCss = false;
+import "@fortawesome/fontawesome-svg-core/styles.css";
 import {
     faEye,
     faEyeSlash,
diff --git a/koha-tmpl/intranet-tmpl/prog/js/vue/modules/admin/record_sources.ts b/koha-tmpl/intranet-tmpl/prog/js/vue/modules/admin/record_sources.ts
index adbe680d64..40e2baaf4d 100644
--- a/koha-tmpl/intranet-tmpl/prog/js/vue/modules/admin/record_sources.ts
+++ b/koha-tmpl/intranet-tmpl/prog/js/vue/modules/admin/record_sources.ts
@@ -2,7 +2,9 @@ import { createApp } from "vue";
 import { createPinia } from "pinia";
 import { createWebHistory, createRouter } from "vue-router";
 
-import { library } from "@fortawesome/fontawesome-svg-core";
+import { config, library } from "@fortawesome/fontawesome-svg-core";
+config.autoAddCss = false;
+import "@fortawesome/fontawesome-svg-core/styles.css";
 import {
     faPlus,
     faMinus,
diff --git a/koha-tmpl/intranet-tmpl/prog/js/vue/modules/erm.ts b/koha-tmpl/intranet-tmpl/prog/js/vue/modules/erm.ts
index 614f0dc724..d7b21be7fc 100644
--- a/koha-tmpl/intranet-tmpl/prog/js/vue/modules/erm.ts
+++ b/koha-tmpl/intranet-tmpl/prog/js/vue/modules/erm.ts
@@ -2,7 +2,9 @@ import { createApp } from "vue";
 import { createWebHistory, createRouter } from "vue-router";
 import { createPinia } from "pinia";
 
-import { library } from "@fortawesome/fontawesome-svg-core";
+import { config, library } from "@fortawesome/fontawesome-svg-core";
+config.autoAddCss = false;
+import "@fortawesome/fontawesome-svg-core/styles.css";
 import {
     faList,
     faPlus,
diff --git a/koha-tmpl/intranet-tmpl/prog/js/vue/modules/preservation.ts b/koha-tmpl/intranet-tmpl/prog/js/vue/modules/preservation.ts
index 38775b6581..1b142d5976 100644
--- a/koha-tmpl/intranet-tmpl/prog/js/vue/modules/preservation.ts
+++ b/koha-tmpl/intranet-tmpl/prog/js/vue/modules/preservation.ts
@@ -2,7 +2,9 @@ import { createApp } from "vue";
 import { createWebHistory, createRouter } from "vue-router";
 import { createPinia } from "pinia";
 
-import { library } from "@fortawesome/fontawesome-svg-core";
+import { config, library } from "@fortawesome/fontawesome-svg-core";
+config.autoAddCss = false;
+import "@fortawesome/fontawesome-svg-core/styles.css";
 import {
     faPlus,
     faMinus,
diff --git a/koha-tmpl/intranet-tmpl/prog/js/vue/modules/sip2.ts b/koha-tmpl/intranet-tmpl/prog/js/vue/modules/sip2.ts
index 6188354556..4e095a43e3 100644
--- a/koha-tmpl/intranet-tmpl/prog/js/vue/modules/sip2.ts
+++ b/koha-tmpl/intranet-tmpl/prog/js/vue/modules/sip2.ts
@@ -2,7 +2,9 @@ import { createApp } from "vue";
 import { createWebHistory, createRouter } from "vue-router";
 import { createPinia } from "pinia";
 
-import { library } from "@fortawesome/fontawesome-svg-core";
+import { config, library } from "@fortawesome/fontawesome-svg-core";
+config.autoAddCss = false;
+import "@fortawesome/fontawesome-svg-core/styles.css";
 import {
     faPlus,
     faMinus,
diff --git a/rspack.config.js b/rspack.config.js
index 62cf6b1956..de8cc2e9d9 100644
--- a/rspack.config.js
+++ b/rspack.config.js
@@ -19,15 +19,30 @@ module.exports = [
             },
         },
         entry: {
-            erm: "./koha-tmpl/intranet-tmpl/prog/js/vue/modules/erm.ts",
-            preservation:
+            erm: [
+                "./koha-tmpl/intranet-tmpl/prog/js/vue/csp-nonce.js",
+                "./koha-tmpl/intranet-tmpl/prog/js/vue/modules/erm.ts",
+            ],
+            preservation: [
+                "./koha-tmpl/intranet-tmpl/prog/js/vue/csp-nonce.js",
                 "./koha-tmpl/intranet-tmpl/prog/js/vue/modules/preservation.ts",
-            "admin/record_sources":
+            ],
+            "admin/record_sources": [
+                "./koha-tmpl/intranet-tmpl/prog/js/vue/csp-nonce.js",
                 "./koha-tmpl/intranet-tmpl/prog/js/vue/modules/admin/record_sources.ts",
-            acquisitions:
+            ],
+            acquisitions: [
+                "./koha-tmpl/intranet-tmpl/prog/js/vue/csp-nonce.js",
                 "./koha-tmpl/intranet-tmpl/prog/js/vue/modules/acquisitions.ts",
-            islands: "./koha-tmpl/intranet-tmpl/prog/js/vue/modules/islands.ts",
-            sip2: "./koha-tmpl/intranet-tmpl/prog/js/vue/modules/sip2.ts",
+            ],
+            islands: [
+                "./koha-tmpl/intranet-tmpl/prog/js/vue/csp-nonce.js",
+                "./koha-tmpl/intranet-tmpl/prog/js/vue/modules/islands.ts",
+            ],
+            sip2: [
+                "./koha-tmpl/intranet-tmpl/prog/js/vue/csp-nonce.js",
+                "./koha-tmpl/intranet-tmpl/prog/js/vue/modules/sip2.ts",
+            ],
         },
         output: {
             filename: "[name].js",
@@ -102,7 +117,10 @@ module.exports = [
             outputModule: true,
         },
         entry: {
-            islands: "./koha-tmpl/intranet-tmpl/prog/js/vue/modules/islands.ts",
+            islands: [
+                "./koha-tmpl/intranet-tmpl/prog/js/vue/csp-nonce.js",
+                "./koha-tmpl/intranet-tmpl/prog/js/vue/modules/islands.ts",
+            ],
         },
         output: {
             filename: "[name].esm.js",
@@ -169,8 +187,10 @@ module.exports = [
     },
     {
         entry: {
-            "api-client.cjs":
+            "api-client.cjs": [
+                "./koha-tmpl/intranet-tmpl/prog/js/vue/csp-nonce.js",
                 "./koha-tmpl/intranet-tmpl/prog/js/fetch/api-client.js",
+            ],
         },
         devtool: false,
         output: {