Skip to main content

This content is closed to future replies and is no longer being maintained or updated.
Links may no longer function. If you have a similar request, please write a new post.

Question

 Marvin Wehl (MarvinW1)
Blue Cross Blue Shield Minnesota

Blue Cross Blue Shield Minnesota
US
MarvinW1 Member since 2021 4 posts
Blue Cross Blue Shield Minnesota
Posted: Oct 4, 2022
Last activity: Oct 11, 2022
Posted: 4 Oct 2022 9:17 EDT
Last activity: 11 Oct 2022 10:08 EDT
Closed

Nonce Tag Usage

When Implementing CSP Headers across the application, how is the Nonce Tag referenced and used?

To see attachments, please log in.
Pega Platform
Security
Lead System Architect

Posted: 2 years ago
Updated: 2 years ago
Posted: 11 Oct 2022 6:04 EDT
Updated: 11 Oct 2022 10:08 EDT
Marije Schillern (MarijeSchillern)
MOD
Senior Knowledge Management Specialist
Pegasystems Inc.
GB

@MarvinW1 

did you follow the steps as detailed in external documentation?

Example Nonce Usage

https://content-security-policy.com/nonce/

CSP: script-src

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/script-src

https://developer.mozilla.org/en-US/docs/Web/HTML/Global_attributes/nonce

Do you believe this to be a Pega issue?

Can you provide screenshots illustrating how you are configuring the nonce value and a time stamp to the Script-Src directive in the Content Security Policy?

 

 

To see attachments, please log in.

We'd prefer it if you saw us at our best.

Pega Collaboration Center has detected you are using a browser which may prevent you from experiencing the site as intended. To improve your experience, please update your browser.

Close Deprecation Notice