From 2c9204f25f60652bfe8535c5e99fa19b74d324fa Mon Sep 17 00:00:00 2001 From: wbamberg Date: Tue, 22 Oct 2024 11:03:32 -0700 Subject: [PATCH] Elaborate a little on using hashes for static pages --- files/en-us/web/http/csp/index.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/files/en-us/web/http/csp/index.md b/files/en-us/web/http/csp/index.md index b568c5d55f56bf5..dec5a6ff38557ea 100644 --- a/files/en-us/web/http/csp/index.md +++ b/files/en-us/web/http/csp/index.md @@ -239,7 +239,7 @@ Note that: - We have a separate hash for every script in the document. - For the external script "main.js", we also include the `integrity` attribute, and give it the same value. -- Unlike the example using nonces, both the CSP and the content can be static, because the hashes stay the same. +- Unlike the example using nonces, both the CSP and the content can be static, because the hashes stay the same. This makes hash-based policies more suitable for static pages or websites that rely on client-side rendering. #### Scheme-based policies