httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Luis Speciale <lspeci...@gmail.com>
Subject Re: [users@httpd] CSP nonces in apache
Date Thu, 07 Sep 2017 19:56:55 GMT
Le 07/09/2017 à 20:57, Daniel Gruno a écrit :
>>> Try:
>>>
>>> Substitute "s/<(style|script)((?!\s*src=).*)>/<$1 nonce-${numbnonce}
>>> $2>/i"
>>
>> Now it substitutes <script> with <script nonce-%{unique_id}e="">
>> It ignores the value of numbnonce (%{UNIQUE_ID}e) and writes it
>> litterally, even if in the headers this variable appears ok.
>> When I look the headers it has the correct value
>> 'nonce-WbGTF8CoABAAADn5XWYAAAAP'
> 
> might be that you need to uppercase it to NUMBNONCE.


Same behaviour, alas! Thank you again for your answers.

Luis

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message