Skip to content

Conversation

@PavelJurasek
Copy link
Contributor

…same time

Solution for both modes of CSP.
Related to #135.

@PavelJurasek
Copy link
Contributor Author

@spaze Do you think it's OK to use the same nonce for CSP and CSP-ReportOnly headers?

@dg
Copy link
Member

dg commented Mar 14, 2018

Thanks! (I've simplified code a little bit)

@dg dg closed this in edc6e04 Mar 14, 2018
dg pushed a commit that referenced this pull request Mar 14, 2018
@PavelJurasek
Copy link
Contributor Author

I thank you! 🙏
I'll be happy to see new release as it has been over 6 months since last release.

@spaze
Copy link
Contributor

spaze commented Mar 20, 2018

@PavelJurasek

Do you think it's OK to use the same nonce for CSP and CSP-ReportOnly headers?

It is. Also, nice addition, although csp-report might be a bit misleading, I'd suggest csp-report-only or something but it's probably too late.

@dg
Copy link
Member

dg commented Aug 28, 2018

I have changed option to cspReportOnly to be consistent with the rest of configuration.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants