New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 839247 link

Starred by 2 users

Issue metadata

Status: Assigned
Owner:
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 2
Type: Bug



Sign in to add a comment

CSP nonce attributes don't have value in 'Elements' tab in The F12 Dev tool

Reported by martinzh...@gmail.com, May 3 2018

Issue description

UserAgent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36

Steps to reproduce the problem:
1. Open a website which applies CSP 'nonce-' feature
2. Open the Inspector, search the keyword 'nonce'
3. You will find that nonce attributes don't have values

What is the expected behavior?
In Firefox, the nonce attributes have values

What went wrong?
CSP nonce attributes don't have value in 'Elements' tab in The F12 Dev tool 

Figure 01: The screenshot of Inspector in Chrome 
Firgure 02:The screenshot of Inspector in Firefox

Did this work before? N/A 

Chrome version: 65.0.3325.181  Channel: n/a
OS Version: 6.1 (Windows 7, Windows Server 2008 R2)
Flash Version:
 
01.png
68.9 KB View Download
02.png
44.7 KB View Download
Labels: Needs-Milestone
Cc: jmukthavaram@chromium.org
Labels: Needs-Feedback
martinzhou96@,

Thanks for filing the issue.

Could you please provide us the specific URL where issue is reproducible to triage the issue further.


jmukthavaram@

The URL is:
https://bugly.qq.com/v2/
Project Member

Comment 4 by sheriffbot@chromium.org, May 10 2018

Labels: -Needs-Feedback
Thank you for providing more feedback. Adding the requester to the cc list.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Comment 5 by alph@chromium.org, May 10 2018

Cc: mkwst@chromium.org
Components: -Platform>DevTools Platform>DevTools>Authoring
Owner: einbinder@chromium.org
Status: Assigned (was: Unconfirmed)
Able to repro.

Looks like the value is hidden from the attributes on purpose. See https://groups.google.com/a/chromium.org/forum/#!msg/blink-dev/wu_fMIYkyaQ/85j16Cg6BAAJ

Perhaps DevTools can still show it.

Sign in to add a comment