Today I learned
CSP Nonces in Cloudflare Workers
For dynamically generated security pages, I use a per-response nonce so required inline script/style can run without falling back to a broad unsafe-inline CSP.
Topic
2 matching entries across Articles, TIL and Projects.
Short notes and fixes tagged HTTP.
For dynamically generated security pages, I use a per-response nonce so required inline script/style can run without falling back to a broad unsafe-inline CSP.
Use a HEAD request to see the HTTP status and Location header without downloading the complete page.