# Content Security Policy Nonces

> import { SinceTag } from '@site/src/components/UI/Tags';

import { SinceTag } from '@site/src/components/UI/Tags';

# Content Security Policy Nonces

Example is supported since version 1.5.0

In order to prevent certain XSS (Cross-Site Scripting) attacks a [CSP](https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP) can be implemented.
Depending on the CSP configuration in place inline styles and scripts can be forbidden.
By applying a [CSP nonce](https://developer.mozilla.org/en-US/docs/Web/HTML/Global_attributes/nonce) such elements can be explicitly allowed even if they would violate the CSP otherwise.

With version 3 the Web Component compiler Stencil (used to build all of our components) introduced support for CSP nonces.
For details on how to use them please read the [official Stencil docs](https://stenciljs.com/docs/csp-nonce) on the topic.