3 ms·
We use the nonce feature to allow inline scripts because (for legacy reasons) we don't have server side rendering enabled for our React app
by eximius 7y ago
We use the nonce feature to allow inline scripts because (for legacy reasons) we don't have server side rendering enabled for our React app
- yyyk 7y agoIf you're stuck with legacy that's the way it is. Note however that there are interactions between using a nonce and caching which require caution (since nonce is supposed to be used only once but caching can work against that), so proper protection here has a cost in complexity and/or speed.