Skip to content

Conversation

@linawolf
Copy link
Member

Resolves: #187
Releases: main, 13.4

@linawolf linawolf requested a review from ohader December 26, 2025 06:29
@linawolf
Copy link
Member Author

@ohader please review

==============================================

.. versionchanged:: 14.1, 13.4.23
CSP nonce sources set via the `{f:security.nonce()}` ViewHelper are no
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should we rather use <f:security.nonce> notation here, instead of the shorthand notation?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think this VH is almost always used inline

Copy link
Contributor

@garvinhicking garvinhicking left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Some wording changes, generally this looks good, thank you!

Co-authored-by: Garvin Hicking <blog@garv.in>
@garvinhicking garvinhicking merged commit 9947e0e into main Jan 16, 2026
10 checks passed
@garvinhicking garvinhicking deleted the task/nonce branch January 16, 2026 16:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Additional attributes for f:security.nonce

3 participants