How to generate "nonce" and add generated code to script and style tags?

[JohanMa4]

Hi @bepsvpt, i have another trouble, how can i add a "nonce" key and add it to script an style tags?
I want to fix Content Security Policy on my Laravel App.

[bepsvpt]

Hi @JohanMa4,

After setting add-generated-nonce to true in script-src and style-src directives, you can use SecureHeaders::nonce() to get nonce value and add to script or style tags.

[ChaerilM]

@bepsvpt could you update doc to add 'SecureHeaders' => Bepsvpt\SecureHeaders\SecureHeaders::class for it to work on blade template

[bepsvpt]

Hi @Zabanya,

Can you give an example that using it in blade template?

[ChaerilM]

add aliases in config/app/php

'SecureHeaders' => Bepsvpt\SecureHeaders\SecureHeaders::class

blade usage

<script nonce="{{ SecureHeaders::nonce() }}"> ...

[bepsvpt]

Hi @Zabanya,

I have updated the document, you can find it here.