I have been attempting to unitilize Azure AAG’s Rewrite Policy to implement CSP for one of my domains. However, I’ve been recently tasked to use nonce instead of hashes because there are simply way to many dynamically created files from our frontend project. In my other attempt using Nginx, I was able to use simple code to use RequestID to create nonce value and insert into html. Is there any ways I can replicate this idea but using AAG instead?
I had attempted to include a script within the project to insert the nonce directly to HTML but this seems to make the nonce static and easily accessible through the browser.
1