web-security

Other

• A Nonce Is Not a Security Upgrade If Your Pages Are Static

  How a textbook-perfect Content-Security-Policy shipped a site with every script blocked, while every gate stayed green

  Verified · 5 min