Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

nonce module

25 views
Skip to first unread message

Dan Car

unread,
Oct 26, 2022, 10:32:07 AM10/26/22
to
I am trying to find a module that can be used to generate nonces.
Mod_unique_id seems to generate "@" which is not recognized by the browsers.
Mod_csp_nonce seems to be good enough but not recognized by my organization.
Will Apache support this module in the future? Do I have other alternatives?

Thank you

I R A Darth Aggie

unread,
Oct 26, 2022, 5:41:24 PM10/26/22
to
On Wed, 26 Oct 2022 07:32:06 -0700 (PDT),
Dan Car <daniel.c...@gmail.com>, in
Maybe this will help?

https://serverfault.com/questions/856206/how-to-inject-random-csp-nonce-in-apache

--
Consulting Minister for Consultants, DNRC
I can please only one person per day. Today is not your day. Tomorrow
isn't looking good, either.
I am BOFH. Resistance is futile. Your network will be assimilated.

Dan Car

unread,
Oct 27, 2022, 4:58:46 AM10/27/22
to
Dear Aggie,

Thank you.
I have tried with unique_id but it inserts the "@" character of which I cannot rid it off.
Is this solution solving this issue?

All the best,
Daniel Carbunescu

I R A Darth Aggie

unread,
Nov 3, 2022, 2:29:38 PM11/3/22
to
On Thu, 27 Oct 2022 01:58:45 -0700 (PDT),
Dan Car <daniel.c...@gmail.com>, in
https://codingshower.com/apache-web-server-generate-unique-id-for-every-request/

"All the information above is encoded like base64, only difference
being in the characters used – [A-Za-z0-9@-] is replaced with
[A-Za-z0-9+/]."

You can test with a bit of PHP:

<?php
echo $_SERVER["UNIQUE_ID"];
?>

I haven't seen any "@"s.
0 new messages