lockup
lockup copied to clipboard
Set nonce attribute for inline script and style tags
Ensure the inline tags are processed if CSP headers are present and a nonce token is generated.
@gblakeman This PR actually break compatibility with Rails < 5.2, and I'm aware you want to keep as much backwards compatibility as possible. I intend to revisit it to introduce the change in a way that won't break old versions.