Searched hist:e5d413b07e3797d0f7a9df3342f08a2e51ec9fc0 (Results 1 – 1 of 1) sorted by relevance
| /dokuwiki/inc/ |
| H A D | template.php | e5d413b07e3797d0f7a9df3342f08a2e51ec9fc0 Wed Feb 21 14:25:59 UTC 2024 Andreas Gohr <andi@splitbrain.org> Use environment provided NONCE for inline scripts. #3788
When an outside source wants to set a restrictive CSP, it can use a nonce to allow inline scripts instead of using 'unsafe-inline'. This nonce can be passed on via the environment variable NONCE and will be used in tpl_metaheaders to tag our inline JS initializations.
An update to the cspheaders plugin should be made to provide a nonce as well.
|