Re: CSP nonces in apache

[Luis Speciale <lspeciale@xxxxxxxxx>]

Le 07/09/2017 à 20:57, Daniel Gruno a écrit :
> > > Try:
> > >
> > > Substitute "s/<(style|script)((?!\s*src=).*)>/<$1 nonce-${numbnonce}
> > > $2>/i"
> >
> > Now it substitutes <script> with <script nonce-%{unique_id}e="">
> > It ignores the value of numbnonce (%{UNIQUE_ID}e) and writes it
> > litterally, even if in the headers this variable appears ok.
> > When I look the headers it has the correct value
> > 'nonce-WbGTF8CoABAAADn5XWYAAAAP'
>
> might be that you need to uppercase it to NUMBNONCE.


Same behaviour, alas! Thank you again for your answers.

Luis

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx