ISSUE-42: Script-nonce allows inline script, similar treatment for inline css?
CSS Nonce
Script-nonce allows inline script, similar treatment for inline css?
- State:
- CLOSED
- Product:
- CSP Level 2
- Raised by:
- Brad Hill
- Opened on:
- 2013-02-01
- Description:
- http://lists.w3.org/Archives/Public/public-webappsec/2012Dec/0047.html
Inline CSS is considered essential for web performance by many. Should we add a css-nonce directive similar to script-nonce, or a more generic inline-nonce facility? - Related Actions Items:
- No related actions
- Related emails:
- No related emails
Related notes:
Generic nonce syntax added to resolve this issue.
Brad Hill, 4 Jun 2013, 00:03:13Display change log
