| commit | 23f309cfe25db40732bd7adc902727624bf116f5 | [log] [tgz] |
|---|---|---|
| author | Gary Roumanis <groumanis@gmail.com> | Thu May 21 14:56:14 2020 -0700 |
| committer | GitHub <noreply@github.com> | Thu May 21 14:56:14 2020 -0700 |
| tree | 16524c79cbd93ff7ffce528082840d830a011f36 | |
| parent | bc232600fdd512dd79ece23b282208385d1aa290 [diff] |
Allow runMain to work with CSP enforced (#1021) The injected client runs the main method by adding a script tag. If CSP is enforced this will fail as the script tag does not have a nonce as defined by the [spec](https://w3c.github.io/webappsec-csp/#grammardef-base64-value). Update the logic to include a nonce if one is available.