Skip to content

Commit 9111587

Browse files
MeAkibalan-agius4
andauthored
Update adev/src/content/guide/security.md
Co-authored-by: Alan Agius <alan.agius4@gmail.com>
1 parent 5017643 commit 9111587

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

‎adev/src/content/guide/security.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -187,7 +187,7 @@ If you cannot generate nonces in your project, you can allow inline styles by ad
187187
| :----------------------------------------------- | :---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
188188
| `default-src 'self';` | Allows the page to load all its required resources from the same origin. |
189189
| `style-src 'self' 'nonce-randomNonceGoesHere';` | Allows the page to load global styles from the same origin \(`'self'`\) and styles inserted by Angular with the `nonce-randomNonceGoesHere`. |
190-
| `script-src 'self' 'nonce-randomNonceGoesHere';` | Allows the page to load JavaScript from the same origin \(`'self'`\) and scripts inserted by the Angular CLI with the `nonce-randomNonceGoesHere`. This is only required if the Angular CLI adds inline scripts to `index.html`, which happens when you use critical CSS inlining or subresource integrity. |
190+
| `script-src 'self' 'nonce-randomNonceGoesHere';` | Allows the page to load JavaScript from the same origin \(`'self'`\) and scripts inserted by the Angular CLI with the `nonce-randomNonceGoesHere`. Required only when you enable critical CSS inlining or subresource integrity, which add inline scripts to `index.html`. |
191191

192192
Angular itself requires only these settings to function correctly.
193193
As your project grows, you may need to expand your CSP settings to accommodate extra features specific to your application.

0 commit comments

Comments
 (0)