I’m coming back to you with a problem with CSP and passing a parameter to a file read by the load() function.
I am generating and passing a nonce attribute to the header to the csp policy when loading the page. Then the user can perform an action where when they click on the link, a modal window opens and the content is loaded with the jquery load function. There of course is js script and html content (no headers). After calling this function - load and loading the content - the dynamic part comes from the controller called after the click - I have passed a newly generated nonce attribute - different from the one coming from the original page. The question is how to solve this problem?
I will be grateful for any suggestion.