Skip to content
This repository has been archived by the owner on Jul 30, 2019. It is now read-only.

CSP: <script nonce="..."> && <style nonce="..."> are missing. #186

Closed
mikewest opened this issue Apr 11, 2016 · 1 comment · Fixed by #387
Closed

CSP: <script nonce="..."> && <style nonce="..."> are missing. #186

mikewest opened this issue Apr 11, 2016 · 1 comment · Fixed by #387
Assignees
@travisleithead
Labels
needs tests
Milestone
HTML5.1 WD (June ...

Comments

@mikewest
Copy link
Member

The nonce attribute was added to WHATWG's HTML in whatwg/html@882803c. It doesn't seem to have made the transition to W3C's version.
@travisleithead travisleithead self-assigned this Apr 12, 2016
@chaals chaals added this to the HTML5.1 CR milestone May 10, 2016
@chaals
Copy link
Collaborator

chaals commented May 10, 2016

There are tests in webplatformtest

@travisleithead travisleithead mentioned this issue May 16, 2016
Merged
edent added a commit that referenced this issue Feb 17, 2018
@edent
Removing style/nonce
0a68b4b 
This was originally added by #387 in response to #186 and was ported over from whatwg/html@882803c

We currently don't have a `style/nonce` nor `script/nonce`- neither do WHATWG.

`nonce` is already covered by `global`.

* Re whatwg/html#2373
* Re https://github.com/whatwg/html/pull/2373/files#r117354683
* Fixes #1215
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees

@travisleithead travisleithead

Labels
needs tests
Projects
None yet
Milestone
HTML5.1 WD (June 2016)
Development

Successfully merging a pull request may close this issue.

[Large] Port dependent changes for CSP (and other good stuff) from WHATWG
3 participants
@mikewest @travisleithead @chaals