# هل هناك خيار للحصول على nonce CSP تم إنشاؤه من جانب الخادم للنصوص البرمجية غير GTM؟

**URL:** <https://meta.discourse.org/t/is-there-an-option-to-get-server-side-generated-csp-nonce-for-non-gtm-scripts/230904>\
**Category:** Product Support\
**Tags:** pr-welcome\
**Created:** [23 يونيو 2022، 2:04م UTC](https://meta.discourse.org/t/is-there-an-option-to-get-server-side-generated-csp-nonce-for-non-gtm-scripts/230904 "2022-06-23T14:04:11Z")\
**Posts on this page:** 1\
**Showing post:** 3

<div class="post-metadata">

**Author:** ![j127](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/j127/32/79093_2.png) [@j127](https://meta.discourse.org/u/j127)\
**Post date:** [6 يوليو 2022، 12:42ص UTC](https://meta.discourse.org/t/is-there-an-option-to-get-server-side-generated-csp-nonce-for-non-gtm-scripts/230904/3 "2022-07-06T00:42:28Z")

</div>

ستكون قيمة CSP nonce مفيدة لتجاوز مشكلة Cloudflare أيضًا.

يقوم وضع مكافحة الروبوتات الفائقة (Super Bot Fight Mode) من Cloudflare بحقن نصوص برمجية مضمنة وتذكر الوثائق استخدام nonce:

> **[JavaScript Detections](https://developers.cloudflare.com/cloudflare-challenges/challenge-types/javascript-detections/)**
>
> JavaScript Detections is a type of Challenge separate from Cloudflare’s Challenge Pages or Turnstile. Javascript Detections helps Cloudflare's bot solutions identify automated requests.

الخطأ الذي أحصل عليه على موقعي هو: “Refused to execute a script because its hash, its nonce, or ‘unsafe-inline’ does not appear in the script-src directive of the Content Security Policy.”

---

_[View the full topic](https://meta.discourse.org/t/is-there-an-option-to-get-server-side-generated-csp-nonce-for-non-gtm-scripts/230904)._