Hey Nick,
Hmm if I read the documentation, then proxy_html is specifically meant for rewriting urls when doing a proxy, but I can indeed see how you could make it work as a sort of hack though:
ProxyHTMLInterp On
ProxyHTMLLinks script nonce
ProxyHTMLURLMap token ${UNIQUE_ID} V
In this situation the nonce attribute would have to be already in the html from the application, with possibly a token to be able to match it.
Greets,
Roy
> On 30 Dec 2017, at 01:36, Nick Kew <niq@xxxxxxxxxx> wrote:
>
> On Fri, 29 Dec 2017 22:39:11 +0100
> Roy Teeuwen <roy@xxxxxxxxxx> wrote:
>
>> - I have an application which generates static HTML pages, that are
>> cached by a custom apache http module.
>> - I want to start implementing CSP 3 headers by using a nonce to put
>> on all the inline script tags.
>
> If the job is to rewrite something specific in HTML pages,
> mod_proxy_html could be another option. You get a markup-aware
> parser, as opposed to a simple match-and-replace in
> the modules we've mentioned. Though that'll depend on what
> works best with your application and your custom module.
>
> --
> Nick Kew
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
> For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
>
Attachment:
signature.asc
Description: Message signed with OpenPGP
|