Re: [whatwg/fetch] The CSP hooks for `<script src='...' nonce='...'>` are broken. (#269)

Mkay... I do think it's slightly cleaner to put the nonce on the request and have HTML only do a nonce check for inline scripts (and event handlers?).

---
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/269#issuecomment-205311251