From f9d155a306243e258382ad0782e43cd4c157d65d Mon Sep 17 00:00:00 2001
From: damienbod <damien_bod@hotmail.com>
Date: Sun, 14 Jan 2024 09:57:11 +0100
Subject: [PATCH] use the CSP nonce

---
 content/BlazorBffAzureAD/Server/Pages/_Host.cshtml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/content/BlazorBffAzureAD/Server/Pages/_Host.cshtml b/content/BlazorBffAzureAD/Server/Pages/_Host.cshtml
index cee0a61..2e42aa4 100644
--- a/content/BlazorBffAzureAD/Server/Pages/_Host.cshtml
+++ b/content/BlazorBffAzureAD/Server/Pages/_Host.cshtml
@@ -2,6 +2,7 @@
 @namespace BlazorBffAzureAD.Pages
 @using BlazorBffAzureAD.Client
 @addTagHelper *, Microsoft.AspNetCore.Mvc.TagHelpers
+@addTagHelper *, NetEscapades.AspNetCore.SecurityHeaders.TagHelpers
 @{
     Layout = null;
 }
@@ -40,8 +41,8 @@
         <a class="dismiss">🗙</a>
     </div>
 
-    <script src="_framework/blazor.webassembly.js" ></script>
-    <script src="antiForgeryToken.js" ></script>
+    <script asp-add-nonce src="_framework/blazor.webassembly.js"></script>
+    <script asp-add-nonce src="antiForgeryToken.js" ></script>
     @Html.AntiForgeryToken()
 </body>
 </html>