undefined | Better HN

0 pointsLegionMammal9781y ago0 comments

It does seem like CSP nonces do not play well with caching (since they must have a different value on each page load), which would make them a detriment to performance.

0 comments

SahAssar1y ago

You can also include a hash of the contents in the CSP, which plays well with caching.

LegionMammal978OP1y ago

True, a hash works as a good alternative. (Unless you're doing super weird stuff like generating inline scripts at runtime.)

j / k navigate · click thread line to collapse

0 comments

SahAssar1y ago

You can also include a hash of the contents in the CSP, which plays well with caching.

LegionMammal978OP1y ago

True, a hash works as a good alternative. (Unless you're doing super weird stuff like generating inline scripts at runtime.)

j / k navigate · click thread line to collapse