The latest articles on DEV Community by wessisaac (@wessisaac). https://dev.to/wessisaac https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F1259396%2Ffdfc69a5-d415-4f55-aad8-de27e6f37aee.png https://dev.to/wessisaac en wessisaac Wed, 17 Jan 2024 19:31:50 +0000 https://dev.to/wessisaac/how-can-i-substitute-the-csp-nonce-value-in-angulars-indexhtml-using-net-7-c-2j3f https://dev.to/wessisaac/how-can-i-substitute-the-csp-nonce-value-in-angulars-indexhtml-using-net-7-c-2j3f <div class="ltag__stackexchange--container"> <div class="ltag__stackexchange--title-container"> <div class="ltag__stackexchange--title"> <div class="ltag__stackexchange--header"> <img src="https://res.cloudinary.com/practicaldev/image/fetch/s--AoTUKOcU--/c_limit%2Cf_auto%2Cfl_progressive%2Cq_auto%2Cw_800/https://dev.to/assets/stackoverflow-logo-b42691ae545e4810b105ee957979a853a696085e67e43ee14c5699cf3e890fb4.svg" alt=""> <a href="https://stackoverflow.com/questions/77524492/how-can-i-substitute-the-csp-nonce-value-in-angulars-index-html-using-net-7-c" rel="noopener noreferrer"> How can I substitute the CSP nonce value in Angular's index.html using .net 7 (c#)? </a> </div> <div class="ltag__stackexchange--post-metadata"> <span>Nov 21 '23</span> <span>Comments: 1</span> <span>Answers: 0</span> </div> </div> <a class="ltag__stackexchange--score-container" href="https://stackoverflow.com/questions/77524492/how-can-i-substitute-the-csp-nonce-value-in-angulars-index-html-using-net-7-c" rel="noopener noreferrer"> <img src="https://res.cloudinary.com/practicaldev/image/fetch/s--oeieW07A--/c_limit%2Cf_auto%2Cfl_progressive%2Cq_auto%2Cw_800/https://dev.to/assets/stackexchange-arrow-up-eff2e2849e67d156181d258e38802c0b57fa011f74164a7f97675ca3b6ab756b.svg" alt=""> <div class="ltag__stackexchange--score-number"> 0 </div> <img src="https://res.cloudinary.com/practicaldev/image/fetch/s--h2-sXgSn--/c_limit%2Cf_auto%2Cfl_progressive%2Cq_auto%2Cw_800/https://dev.to/assets/stackexchange-arrow-down-4349fac0dd932d284fab7e4dd9846f19a3710558efde0d2dfd05897f3eeb9aba.svg" alt=""> </a> </div> <div class="ltag__stackexchange--body"> <p>Using Angular 16, we can specify a CSP_NONCE injection token to be used in all inline styles and scripts (as described <a href="https://angular.io/guide/security#content-security-policy" rel="nofollow noreferrer">here</a>). In this example, it gets the nonce from globalThis.myRandomNonceValue but I have no idea how that would be provided from the server.</p> <p>In <a href="https://damienbod.com/2023/11/06/using-a-strong-nonce-based-csp-with-angular/" rel="nofollow noreferrer">another example I've seen</a>…</p> </div> <div class="ltag__stackexchange--btn--container"> <a href="https://stackoverflow.com/questions/77524492/how-can-i-substitute-the-csp-nonce-value-in-angulars-index-html-using-net-7-c" class="ltag__stackexchange--btn" rel="noopener noreferrer">Open Full Question</a> </div> </div> angular dotnetcore cspnonce