Nonce feature suddenly stopped working in DXP

[jonatanjii]

Hi,

The nonce feature has stopped working (no nonce is generated) in Optimizely DXP without any code change.
Updated to v 2.50, still same issue. Works locally.

EPiServer.CMS 12.32.4
.NET 6

Jhoose.Security.Admin 2.5.0.349

Reviewed the application logs but couldn´t find anything of value.

[andrewmarkham]

Hi @jonatanjii

The nonce requires a taghelper to be registered/known. Could this be different between the different environments?

https://github.com/andrewmarkham/contentsecuritypolicy?tab=readme-ov-file#nonce-tag-helper

Can you check this.

[andrewmarkham]

@jonatanjii There is also a UI issue in 2.5.0, it means that you cannot edit the response headers. I would recommend that you upgrade to v2.6.2, but this does require .NET8.

[jonatanjii]

Hi @andrewmarkham
I also noted that it actually works in DXP integration as well but not in preprod or prod.
I´ve checked the tag helpers, they are registered in all environments.

I will do an upgrade to .NET 8 when possible and take it from there... thanks!

[andrewmarkham]

Hi @jonatanjii Have you managed to reproduce this issue?