# Is there an option to get server-side generated CSP nonce for non-GTM scripts?

**URL:** <https://meta.discourse.org/t/is-there-an-option-to-get-server-side-generated-csp-nonce-for-non-gtm-scripts/230904>\
**Category:** Product Support\
**Tags:** pr-welcome\
**Created:** [June 23, 2022, 2:04pm UTC](https://meta.discourse.org/t/is-there-an-option-to-get-server-side-generated-csp-nonce-for-non-gtm-scripts/230904 "2022-06-23T14:04:11Z")\
**Posts on this page:** 1\
**Showing post:** 5

<div class="post-metadata">

**Author:** ![kuba.bomba](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/kuba.bomba/32/264646_2.png) [@kuba.bomba](https://meta.discourse.org/u/kuba.bomba)\
**Post date:** [July 27, 2022, 1:31pm UTC](https://meta.discourse.org/t/is-there-an-option-to-get-server-side-generated-csp-nonce-for-non-gtm-scripts/230904/5 "2022-07-27T13:31:23Z")

</div>

Actually… my `unsafe-inline` just stopped working. Did you introduce some breaking changes? Console reports:

```plaintext
Note that 'unsafe-inline' is ignored if either a hash or nonce value is present in the source list

```

The thing is that I didn’t change anything. Did the splash screen’s nonce break it? 😕

I lost a month of web analytics data because of that…

---

_[View the full topic](https://meta.discourse.org/t/is-there-an-option-to-get-server-side-generated-csp-nonce-for-non-gtm-scripts/230904)._