Port the `nonce` attribute for `<link>`. #599

mikewest · 2016-09-27T18:08:21Z

Please port over the changes from whatwg/html#1820 once it lands (soonish?).

Thanks!

mikewest · 2016-09-28T11:46:19Z

FYI: This landed.

chaals · 2016-09-29T10:32:21Z

What about implementation?

mikewest · 2016-09-29T11:13:05Z

Chrome, Firefox, and WebKit all support nonce mechanisms for stylesheets, which require support for the attribute, and an eventual fix for #198: see the nonce section of the implementation report at https://w3c.github.io/webappsec/implementation_reports/CSP2_implementation_report.html.

Edge support should be coming soon when they land CSP2 bits and pieces.

adanilo · 2016-09-30T06:47:55Z

Thanks, @stevefaulkner let me know if you'd like to pass this on to me, happy for you to port of course!

stevefaulkner · 2016-09-30T07:09:59Z

@adanilo @mikewest has reviewed my PR #604 and have updated in response. Can you take a look and merge if good, thanks!

chaals · 2016-10-01T17:35:56Z

Oops. Labelling for historical purposes at this stage, I hope.

adanilo · 2016-10-17T06:10:36Z

Closing, PR #604 covered this and it's been merged.

stevefaulkner self-assigned this Sep 29, 2016

stevefaulkner mentioned this issue Sep 29, 2016

Port nonce #604

Merged

chaals added needs tests Needs horizontal review and removed needs tests labels Oct 1, 2016

adanilo closed this as completed Oct 17, 2016

Provide feedback