Tips & Tricks

Working with Nonces

<?php

$token = openssl_random_pseudo_bytes(16);

$nonce = bin2hex($token);

?>


@style to <style nonce>

<div id="123">

<style nonce="<?php echo $nonce ?>">

#123 {background-color:black;}

</style>

</div>

@onclick to <script nonce>

<button id="123">Click Me</button>

<script nonce="<?php echo $nonce ?>">

document.querySelector('#123').addEventListener('click', () => {alert('hello')} , false);

</script>

Oops

Your browser is not supported

A modern browser with Javascript ES6 is required

Any major browser from 2015 onwards will be suitable