mirror of
https://github.com/angular/angular.git
synced 2026-09-14 13:54:52 +08:00
committed by
Andrew Kushnir
parent
e82f12ee06
commit
b75625ba49
@@ -198,7 +198,7 @@ If an attacker can predict future nonces, they can circumvent the protections of
|
||||
|
||||
</div>
|
||||
|
||||
If you cannot generate nones in your project, you can allow inline styles by adding `'unsafe-inline'` to the `style-src` section of the CSP header.
|
||||
If you cannot generate nonces in your project, you can allow inline styles by adding `'unsafe-inline'` to the `style-src` section of the CSP header.
|
||||
|
||||
| Sections | Details |
|
||||
|:--- |:--- |
|
||||
@@ -380,4 +380,4 @@ Angular-specific APIs that should be audited in a security review, such as the [
|
||||
|
||||
<!-- end links -->
|
||||
|
||||
@reviewed 2022-02-28
|
||||
@reviewed 2023-05-16
|
||||
|
||||
Reference in New Issue
Block a user