7 ms·
Content-Security-Policy is doing something vaguely similar with <script> tags, where you add a nonce in the HTTP header and then only <script nonce='foo'> tags
by alexmuller 13y ago
Content-Security-Policy is doing something vaguely similar with <script> tags, where you add a nonce in the HTTP header and then only <script nonce='foo'> tags with those nonces are executed.
script-src at http://www.w3.org/TR/CSP11/ http://www.w3.org/TR/CSP11/