From d840d5c64f430051184fc9b788c5680f8246cfe8 Mon Sep 17 00:00:00 2001 From: Salih Date: Mon, 29 May 2023 15:35:06 +0300 Subject: [PATCH] Update Security-Headers.md --- docs/en/UI/AspNetCore/Security-Headers.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/docs/en/UI/AspNetCore/Security-Headers.md b/docs/en/UI/AspNetCore/Security-Headers.md index c0d0dcc467..b02e9691b0 100644 --- a/docs/en/UI/AspNetCore/Security-Headers.md +++ b/docs/en/UI/AspNetCore/Security-Headers.md @@ -51,6 +51,10 @@ Abp Framework provides a property to add a dynamic script-src nonce value to the This feature is disabled by default. You can enable it by setting the `UseContentSecurityPolicyScriptNonce` property of the `AbpSecurityHeadersOptions` class to `true`. +### Ignore Script Nonce + +You can ignore the script nonce for some pages or some selectors. You can use the `IgnoredScriptNoncePaths` and `IgnoredScriptNonceSelectors` properties of the `AbpSecurityHeadersOptions` class. + **Example:** ```csharp