Skip to content

Commit

Permalink
Elaborate a little on using hashes for static pages
Browse files Browse the repository at this point in the history
  • Loading branch information
wbamberg committed Oct 22, 2024
1 parent 6f3cd1b commit 2c9204f
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion files/en-us/web/http/csp/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -239,7 +239,7 @@ Note that:

- We have a separate hash for every script in the document.
- For the external script "main.js", we also include the `integrity` attribute, and give it the same value.
- Unlike the example using nonces, both the CSP and the content can be static, because the hashes stay the same.
- Unlike the example using nonces, both the CSP and the content can be static, because the hashes stay the same. This makes hash-based policies more suitable for static pages or websites that rely on client-side rendering.

#### Scheme-based policies

Expand Down

0 comments on commit 2c9204f

Please sign in to comment.