The Nonce-nce of Web Security: an Investigation of CSP Nonces Reuse

Matteo Golinelli, Francesco Bonomi, Bruno Crispo

Content Security Policy (CSP) is an effective security mechanism that prevents the exploitation of Cross-Site Scripting (XSS) vulnerabilities on websites by specifying the sources…