|
|
|
|
|
by alexmuller
4562 days ago
|
|
Content-Security-Policy is doing something vaguely similar with <script> tags, where you add a nonce in the HTTP header and then only <script nonce='foo'> tags with those nonces are executed. script-src at http://www.w3.org/TR/CSP11/ |
|