You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Commit 9111587
Browse filesBrowse the repository at this point in the historyBrowse files
|`default-src 'self';`| Allows the page to load all its required resources from the same origin. |
189
189
|`style-src 'self' 'nonce-randomNonceGoesHere';`| Allows the page to load global styles from the same origin \(`'self'`\) and styles inserted by Angular with the `nonce-randomNonceGoesHere`. |
190
-
|`script-src 'self' 'nonce-randomNonceGoesHere';`| Allows the page to load JavaScript from the same origin \(`'self'`\) and scripts inserted by the Angular CLI with the `nonce-randomNonceGoesHere`. This is only required if the Angular CLI adds inline scripts to `index.html`, which happens when you use critical CSS inlining or subresource integrity. |
190
+
|`script-src 'self' 'nonce-randomNonceGoesHere';`| Allows the page to load JavaScript from the same origin \(`'self'`\) and scripts inserted by the Angular CLI with the `nonce-randomNonceGoesHere`. Required only when you enable critical CSS inlining or subresource integrity, which add inline scripts to `index.html`. |
191
191
192
192
Angular itself requires only these settings to function correctly.
193
193
As your project grows, you may need to expand your CSP settings to accommodate extra features specific to your application.
0 commit comments