Skip to content
  • George Claghorn's avatar
    ceeef26f
    Read the CSP nonce on page load · ceeef26f
    George Claghorn authored
    Turbolinks replaces the CSP nonce <meta> tag on page change, but inline scripts inserted by UJS need the nonce from the initial page load. In general, it doesn't matter to UJS if the nonce changes after the page loads: only the initial value is relevant.
    ceeef26f
    Read the CSP nonce on page load
    George Claghorn authored
    Turbolinks replaces the CSP nonce <meta> tag on page change, but inline scripts inserted by UJS need the nonce from the initial page load. In general, it doesn't matter to UJS if the nonce changes after the page loads: only the initial value is relevant.
Loading