Comment on Hardening the Firefox Front End with Content Security PoliciesparentComments−LegionMammal9781yIt does seem like CSP nonces do not play well with caching (since they must have a different value on each page load), which would make them a detriment to performance.−SahAssar1yYou can also include a hash of the contents in the CSP, which plays well with caching.−LegionMammal9781yTrue, a hash works as a good alternative. (Unless you're doing super weird stuff like generating inline scripts at runtime.)
Comments
It does seem like CSP nonces do not play well with caching (since they must have a different value on each page load), which would make them a detriment to performance.
You can also include a hash of the contents in the CSP, which plays well with caching.
True, a hash works as a good alternative. (Unless you're doing super weird stuff like generating inline scripts at runtime.)