Home
last modified time | relevance | path

Searched hist:e5d413b07e3797d0f7a9df3342f08a2e51ec9fc0 (Results 1 – 1 of 1) sorted by relevance

/dokuwiki/inc/
H A Dtemplate.phpe5d413b07e3797d0f7a9df3342f08a2e51ec9fc0 Wed Feb 21 14:25:59 UTC 2024 Andreas Gohr <andi@splitbrain.org> Use environment provided NONCE for inline scripts. #3788

When an outside source wants to set a restrictive CSP, it can use a
nonce to allow inline scripts instead of using 'unsafe-inline'. This
nonce can be passed on via the environment variable NONCE and will be
used in tpl_metaheaders to tag our inline JS initializations.

An update to the cspheaders plugin should be made to provide a nonce as
well.