Accessing the nonce from JavaScript, makes all nonce based CSPs strict-dynamic | Heykuki News