Hi Rossel, I have a question about the level of compliance with the question I posted. Could you please explain if it's level 3 compliant or not? If any, please explain.
AGAIN Question:--
Now consider another Content-Security-Policy header sent by syssec. com:
default-src 'self', script-src 'nonce-ABCDEF'
Would a level 3 compliant browser execute the following script (YES/NO) ? Why? Explain briefly.
‹script src="other.com/foo js" nonce="ABCDEF" ></script>