Difference between revisions for CSP Nonce
|
|
Next edit →
|
| Version1 | Version2 | Differences |
|---|---|---|
| 1 | 1 | === When to Use a CSP Nonce (and When Not To) === |
| 2 |
|
|
| 2 | ||
| 3 | 3 | A **Content Security Policy (Nonce)** is a security mechanism used to allow specific, trusted inline ##<script>## or ##<style>## elements to execute on a webpage, even when a strict CSP is in place that otherwise blocks all inline code (e.g., by omitting ##'unsafe-inline'##). |
| 4 | 4 | |
| 5 | 5 | ==== 1. When You Need a CSP Nonce ==== |