CSP Nonce Support

[buchanaf]

I was hoping to set up CSP for my site, but it's relatively difficult with Google Tag Manager. Would it be possible to implement the following strategy by default and allow people to have inline scripts opt-in with CSP_NONCE:

https://scotthelme.co.uk/csp-nonce-support-in-nginx/

[edmorley]

Hi

This buildpack is now deprecated and we are recommending people move the more actively maintained heroku-buildpack-nginx. For migration advice see here.

As such, I'm closing this issue out since we won't be making further changes to this buildpack.