actionview/app/assets/javascripts/rails-ujs/utils/csp.coffee


1
2
3
4
5
6
7
8

nonce = null

Rails.loadCSPNonce = ->
  nonce = document.querySelector("meta[name=csp-nonce]")?.content

# Returns the Content-Security-Policy nonce for inline scripts.
Rails.cspNonce = ->
  nonce ? Rails.loadCSPNonce()