David Taylor 767b49232e
FIX: Omit CSP nonce and hash values when unsafe-inline enabled (#25590)
Browsers will ignore unsafe-inline if nonces or hashes are included in the CSP. When unsafe-inline is enabled, nonces and hashes are not required, so we can skip them.

Our strong recommendation remains that unsafe-inline should not be used in production.
2024-02-07 12:35:35 +00:00
..
2022-04-28 11:51:03 +02:00
2023-02-21 10:30:48 +01:00
2023-02-21 10:30:48 +01:00
2020-07-21 15:55:03 +08:00
2024-01-30 10:37:25 -07:00