Breaking News: Grepper is joining You.com. Read the official announcement!

content-Security-Policy with cdn jquery

Healthy Herring answered on November 21, 2022 Popularity 6/10 Helpfulness 2/10

answer content-Security-Policy with cdn jquery

content-Security-Policy with cdn jquery

Comment

<!DOCTYPE html>
<html>

    <head>
        <meta http-equiv="Content-Security-Policy" content="default-src http://localhost 'nonce-123456' ; child-src 'none'; object-src 'none'; script-src 'nonce-123456';">
        <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.1.1/jquery.js" nonce="123456"></script> <!-- HTML nonce works -->
        <script nonce="123456">
            // This works
            console.log('Inline nonce works');

            // This will also work
            var s = document.createElement('script');
            s.setAttribute('nonce', '123456');
            s.textContent = 'console.log("Dynamically generated inline tag works")';
            document.head.appendChild(s);

            // This won't work
            var s2 = document.createElement('script');
            s2.setAttribute('nonce', '123456');
            s2.textContent = 'console.log("Dynamically generated inline tag appended via jQuery doesn\'t work")';
            $(document.head).append(s2); // This will throw a CSP error
        </script>
    </head>

<body>

</body>

</html>

Popularity 6/10 Helpfulness 2/10 Language whatever

Source: stackoverflow.com

Tags: cdn content-security-policy jquery whatever

Link to this answer
Share Copy Link

Contributed on Nov 21 2022

Healthy Herring

0 Answers Avg Quality 2/10

content-Security-Policy with cdn jquery

Contents

More Related Answers

content-Security-Policy with cdn jquery

Grepper

Documentation

Social

Legal

Contact

Oops, You will need to install Grepper and log-in to perform this action.