Skip to content

Instantly share code, notes, and snippets.

@vwo-kb
Last active February 26, 2024 13:35
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save vwo-kb/7ffc5c6fefc207e5ec8c620b0d6b29f2 to your computer and use it in GitHub Desktop.
Save vwo-kb/7ffc5c6fefc207e5ec8c620b0d6b29f2 to your computer and use it in GitHub Desktop.
default-src 'self' blob:;
connect-src *.visualwebsiteoptimizer.com app.vwo.com;
style-src 'self' 'unsafe-inline' *.visualwebsiteoptimizer.com app.vwo.com;
script-src 'self' 'nonce-[your-nonce-value]' *.visualwebsiteoptimizer.com app.vwo.com 'strict-dynamic';
script-src-elem 'self' 'nonce-[your-nonce-value]' *.visualwebsiteoptimizer.com app.vwo.com 'strict-dynamic';
img-src 'self' *.visualwebsiteoptimizer.com chart.googleapis.com app.vwo.com;
worker-src 'self' blob:;
frame-src app.vwo.com *.visualwebsiteoptimizer.com;
@chess-octane
Copy link

Can we use hash-based instead of nonce?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment