• G
    Read the CSP nonce on page load · ceeef26f
    George Claghorn 提交于
    Turbolinks replaces the CSP nonce <meta> tag on page change, but inline scripts inserted by UJS need the nonce from the initial page load. In general, it doesn't matter to UJS if the nonce changes after the page loads: only the initial value is relevant.
    ceeef26f
csp.coffee 220 字节