diff --git a/src/content/guides/csp.mdx b/src/content/guides/csp.mdx index a7c182e58e37..123fad16393d 100644 --- a/src/content/guides/csp.mdx +++ b/src/content/guides/csp.mdx @@ -19,7 +19,7 @@ related: url: https://web.dev/trusted-types --- -Webpack is capable of adding `nonce` to all scripts that it loads. To activate the feature set a `__webpack_nonce__` variable needs to be included in your entry script. A unique hash based nonce should be generated and provided for each unique page view this is why `__webpack_nonce__` is specified in the entry file and not in the configuration. Please note that `nonce` should always be a base64-encoded string. +Webpack is capable of adding a `nonce` to all scripts that it loads. To activate this feature, set a `__webpack_nonce__` variable and include it in your entry script. A unique hash-based `nonce` will then be generated and provided for each unique page view (this is why `__webpack_nonce__` is specified in the entry file and not in the configuration). Please note that the `__webpack_nonce__` should always be a base64-encoded string. ## Examples