nonce

Open the developer tool on console panel and reload the page.

Copy & paste the following script and check the differences between enabling/disabling the nonce.

var scriptElement = document.createElement('script'); scriptElement.innerHTML = 'alert("Hello World!")'; document.body.append(scriptElement);

Content Security Policy is not set.
enable

Hosted by Deno Deploy. Source code on GitHub.