Difference between revisions for CSP Nonce





Next edit →

Version1 Version2 Differences
1 1 === When to Use a CSP Nonce (and When Not To) ===
2  
  2  
3 3 A **Content Security Policy (Nonce)** is a security mechanism used to allow specific, trusted inline ##<script>## or ##<style>## elements to execute on a webpage, even when a strict CSP is in place that otherwise blocks all inline code (e.g., by omitting ##'unsafe-inline'##).
4 4
5 5 ==== 1. When You Need a CSP Nonce ====