Project

General

Profile

Task #100887

Updated by Oliver Hader over 1 year ago

→ find examples at e.g. https://scotthelme.co.uk/csp-nonces-the-easy-way-with-cloudflare-workers/ 

 Find a way that e.g. uses a static nonce value, e.g. @<script src="..." nonce="[[nonce-placeholder]]">@ which will be substituted by a remote proxy server (nginx, CloudFlare, ...). In addition, that proxy server would have to take care of adjusting the CSP HTTP headers as well.

Back