Provide csp_nonce to Soy Templates

The CSP nonce is only provided if available. If a filter is installed
that attaches "nonce" attribute to request. For example in google
deployment of gerrit we have such filter that sets nonce on all requests
before they are processed by a servelet.

CSP helps protects sites from XSS attacks. On Google hosts we set CSP
headers that require all script elements to be accompanied by nonce (per
request generated random string). Soy templates have a built in support
for attaching nonce, as long as the value is provided using Inject Data

Google-Bud-Id: b/33429040
Release-Notes: skip
Change-Id: Ifa3a07b8c77918a8a4ab48775b68e4f3b39bd3cb
2 files changed
tree: 59a7b678f5cb7d4813667f7f97f2202ebe397185
  1. .settings/
  2. Documentation/
  3. java/
  4. javatests/
  5. lib/
  6. modules/
  7. resources/
  8. tools/
  9. .bazelrc
  10. .bazelversion
  11. .gitignore
  12. .gitmodules
  13. .mailmap
  14. BUILD
  16. fake_pom_deploy.xml
  19. version.bzl

Gitiles - A simple JGit repository browser

Gitiles is a simple repository browser for Git repositories, built on JGit. Its guiding principle is simplicity: it has no formal access controls, no write access, no fancy Javascript, etc.

Gitiles automatically renders *.md Markdown files into HTML for simplified documentation. Refer to the Markdown documentation for details.


Gitiles is configurable in a git-style configuration file named gitiles.config. Refer to the configuration documentation for details.


Use the issue tracker at github to file bugs.

Contributing to Gitiles

Please refer to the Developer Guide.