mirror of
https://github.com/django/django.git
synced 2026-02-08 18:39:28 +08:00
Added missing quotes around nonce in docs/ref/csp.txt.
This commit is contained in:
@@ -261,7 +261,7 @@ expression into the CSP header.
|
||||
To use this nonce in templates, the
|
||||
:func:`~django.template.context_processors.csp` context processor needs to be
|
||||
enabled. It adds a ``csp_nonce`` variable to the template context, allowing
|
||||
inline elements to include a matching ``nonce={{ csp_nonce }}`` attribute in
|
||||
inline elements to include a matching ``nonce="{{ csp_nonce }}"`` attribute in
|
||||
inline scripts or styles.
|
||||
|
||||
The browser will only execute inline elements that include a ``nonce=<value>``
|
||||
|
||||
Reference in New Issue
Block a user