J
jeremy
8 minutes
Django Nonce Attribute Template Tag Stamps the CSP Nonce on Script and Link Elements
`{% csp_nonce_attr %}` renders `nonce="..."` on `<script>` and `<link>` elements, and `{% csp_nonce_attr form.media %}` applies it to a Media object's assets. Check `security.W027` warns when `CSP.NONCE` is in the policy but the `csp` context processor is not configured.