Implementation of Nonce parameter
I'm trying to implement a Nonce parameter within an Angular website.
Currently, I'm adding the Nonce parameter to the API initialization scripts in the <head> section, however, the scripts that are generated at runtime do not seem to be propagating this parameter.
<script src="https://cdn.dynamicyield.com/api/0000000/api_static.js" nonce="123456" type="text/javascript" async=""></script>
<script type="application/javascript" src="//st.dynamicyield.com/st?sec=0000000&..."></script>
-
Official comment
This functionality is not currently supported by Dynamic Yield. Specifically, DY cannot automatically apply a CSP nonce to styles injected by its script, even when a nonce is provided to DY.
For customers that require this capability to meet their CSP implementation requirements, the recommended approach is an Experience API-only (scriptless) implementation.Comment actions
Please sign in to leave a comment.
Comments
1 comment