Accessing the nonce from JavaScript, makes all nonce based CSPs strict-dynamic (github.com) 1 points by bandamo 4y ago ↗ HN
[–] bandamo 4y ago ↗ Stumbled upon this and seems like a security issue. Why do browser not block the access to the nonce attribute?
1 comment
[ 5.7 ms ] story [ 19.8 ms ] thread