Struct CspNonce 

pub struct CspNonce(/* private fields */);

The request’s Content-Security-Policy nonce, as an extractor (Rails’ content_security_policy_nonce).

A new random value (16 bytes, base64) per request, created by the ContentSecurityPolicy layer and sent as 'nonce-<value>' wherever the policy lists NONCE. Pass it to the template and write <script nonce="{{ nonce }}">; <meta name="csp-nonce" content="{{ nonce }}"> exposes it to JavaScript (Rails’ csp_meta_tag). Rejects with Error::Internal when no policy layer wraps the route.

Examples

use axum::response::Html;
use ocre::security::CspNonce;

async fn page(nonce: CspNonce) -> Html<String> {
    Html(format!(r#"<script nonce="{nonce}">console.log("allowed")</script>"#))
}

Implementations

impl CspNonce

pub fn as_str(&self) -> &str

The nonce value, without the 'nonce-...' wrapper.

Examples

async fn page(nonce: ocre::security::CspNonce) -> String {
    nonce.as_str().to_owned()
}

Trait Implementations

impl Clone for CspNonce

fn clone(&self) -> CspNonce

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CspNonce

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for CspNonce

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for CspNonce

impl<S: Sync> FromRequestParts<S> for CspNonce

type Rejection = Error

If the extractor fails it’ll use this “rejection” type. A rejection is a kind of error that can be converted into a response.

async fn from_request_parts( parts: &mut Parts, _state: &S, ) -> Result<Self, Error>

Perform the extraction.

impl PartialEq for CspNonce

fn eq(&self, other: &CspNonce) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for CspNonce