CSP Nonce in Core Extension | Community
Skip to main content
M
MattBlake
Level 2
September 24, 2021
Solved

CSP Nonce in Core Extension

  • September 24, 2021
  • 1 reply
  • 2894 views

Hi All, just wondered... does anyone out there have much experience of using the CSP Nonce option in Core extension? Anyone managed to get it working?

 

I have heard that there are issues with NONCEs and Single Page Apps (and that some browsers only have limited support). Would be really interesting to hear how others have got on...

 

Best

 

 

Best answer by deepakkv

Hi @mattblake , I don't know, you are solved it not. Recently I have added the nonce element on core extension. It is actually a painless process. Here are main steps that you need to do.

 

  1. Create a data element that references where the nonce is located within your data layer.
  2. Configure the Core Extension and specify which data element you used.
  3. Publish your data element and Core Extension changes.
  4. Use the same nonce value in HTML meta tag or HTTP Header.

Here is the documentation related to it. Documentation

 

 I didn't find any issues with single page applications or browsers yet. 

1 reply

D
deepakkvAccepted solution
Level 3
December 14, 2021

Hi @mattblake , I don't know, you are solved it not. Recently I have added the nonce element on core extension. It is actually a painless process. Here are main steps that you need to do.

 

  1. Create a data element that references where the nonce is located within your data layer.
  2. Configure the Core Extension and specify which data element you used.
  3. Publish your data element and Core Extension changes.
  4. Use the same nonce value in HTML meta tag or HTTP Header.

Here is the documentation related to it. Documentation

 

 I didn't find any issues with single page applications or browsers yet. 

    M
    MattBlakeAuthor
    Level 2
    December 14, 2021

    Thanks - I'll give it a try 🙂

    Terms & ConditionsAccessibility statement

    Loading footer...