Adding nonce keys in CSP header

If you want to configure this yourself, it depends on which hosting environment you are running. Take a look at this article: https://wp-techsupport.com/implementing-content-security-policy-csp-wordpress/

However, there are also plugins that can help with this. Some security plugins have tools for this: https://www.ads-software.com/plugins/tags/security/

And then there are some like this: https://www.ads-software.com/plugins/cookies-and-content-security-policy/

The issue is not resolved. when using customized nonces, it is showing errors for cf7 and refuce to load the script

How did you configure the details and what do they currently look like?

In our website I am using jquery min and contact form 7 as well. Our facing issue is adding csp with nonces. How it can be implemented?

Is this nonce key used for all scripts? Need to use anywhere in the site?

while adding console issue is coming with ‘wpcf7 is not defined’ as it is uses inline script. Functionally we have to remove unsafe-inline right? It we remove, it will break the scripts

• This reply was modified 4 months, 1 week ago by wpbackend.