News for hackers. Stuff that matters.

A comment on Accessing the nonce from JavaScript, makes all nonce based CSPs strict-dynamic.

Re:Accessing the nonce from JavaScript, makes all nonce base... by bandamo on Tuesday September 27, 2022 @05:00AM (#32993022)
Stumbled upon this and seems like a security issue. Why do browser not block the access to the nonce attribute?
[ Parent | on HN ]

There are no comments on this comment yet.