rails/actionview/app/javascript/rails-ujs/utils/csp.js

12 lines
306 B
JavaScript

let nonce = null
const loadCSPNonce = () => {
const metaTag = document.querySelector("meta[name=csp-nonce]")
return nonce = metaTag && metaTag.content
}
// Returns the Content-Security-Policy nonce for inline scripts.
const cspNonce = () => nonce || loadCSPNonce()
export { cspNonce, loadCSPNonce }