5 ms·Accessing the nonce from JavaScript, makes all nonce based CSPs strict-dynamic1 points by bandamo 4y agobandamo 4y agoStumbled upon this and seems like a security issue. Why do browser not block the access to the nonce attribute?