David Ross randomdross

## Send nonce to frontend.js
request.headers.set('x-random-csp-nonce', randomNonce)

## Retrieve header.js
CSPNonce:   validateCSPNonce(req.Header.Get("x-random-csp-nonce"))

## Nonce validation.go
func validateCSPNonce(cspNonce string) string {
	if m, _ := regexp.MatchString("^[a-zA-Z0-9]{20}$", cspNonce); !m {
  		return ""
	}
	return cspNonce
}

## Cloudflare CSP Worker.js
addEventListener('fetch', event => {
 event.respondWith(handleRequest(event.request))
})

/**
* Fetch a request and return the response, with CSP applied
* @param {Request} request
*/
async function handleRequest(request) {
 randomNonce = generateNonce(20)

## Nonce validation.txt
func validateCSPNonce(cspNonce string) string {
	if m, _ := regexp.MatchString("^[a-zA-Z0-9]{20}$", cspNonce); !m {
  		return ""
	}
	return cspNonce
}

## Retrieve header.txt
CSPNonce:   validateCSPNonce(req.Header.Get("x-random-csp-nonce"))

## Cloudflare CSP Worker.txt
addEventListener('fetch', event => {
 event.respondWith(handleRequest(event.request))
})

/**
* Fetch a request and return the response, with CSP applied
* @param {Request} request
*/
async function handleRequest(request) {
 randomNonce = generateNonce(20)

## Send nonce to frontend.txt
request.headers.set('x-random-csp-nonce', randomNonce)

## CSP Example.txt
object-src 'none'; script-src 'nonce-[random nonce]' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:; base-uri 'none';

## gist:015bb5a4cc9737329b17
### Keybase proof

I hereby claim:

  * I am randomdross on github.
  * I am dross (https://keybase.io/dross) on keybase.
  * I have a public key whose fingerprint is 248D 07E5 5F4B ED0B 5C90  6774 9683 9400 595D F27E

To claim this, I am signing this object:
	func validateCSPNonce(cspNonce string) string {
	if m, _ := regexp.MatchString("^[a-zA-Z0-9]{20}$", cspNonce); !m {
	return ""
	}
	return cspNonce
	}
	addEventListener('fetch', event => {
	event.respondWith(handleRequest(event.request))
	})

	/**
	* Fetch a request and return the response, with CSP applied
	* @param {Request} request
	*/
	async function handleRequest(request) {
	randomNonce = generateNonce(20)
	### Keybase proof

	I hereby claim:

	* I am randomdross on github.
	* I am dross (https://keybase.io/dross) on keybase.
	* I have a public key whose fingerprint is 248D 07E5 5F4B ED0B 5C90 6774 9683 9400 595D F27E

	To claim this, I am signing this object: