Glossary term
What is nonce? Meaning for developers
In The Browser Contract
A random one-time value made for each response. It marks which inline scripts the CSP allows.
Learn it properly · The Browser ContractLesson 7: Frontend Security Checklist: XSS, CSP, Clickjacking and Supply ChaindangerouslySetInnerHTML, CSP nonces, frame-ancestors, Subresource Integrity and risky packages. Each one asks: what would you check in a code review?In Security for Developers
A number that must be new for every encryption with the same key. For AES-GCM use 12 random bytes each time and store them with the data.
Learn it properly · Security for DevelopersLesson 5: Secrets, Encryption and Data ProtectionWhere secrets leak (git, logs, front-end bundles), hashing vs encryption vs encoding, TLS in plain words, safe randomness, encrypting data with AES-GCM, and handling personal data.