Struct CspNonce 

pub struct CspNonce(/* private fields */);

A validated CSP nonce.

The nonce is interpolated unescaped into HTML attributes (nonce="{nonce}" on every script/style tag) and raw into the CSP header value. That is only safe because the value comes from CspNonce::generate, whose base64 alphabet contains nothing that is attribute- or directive-significant. The newtype exists so a caller that supplies its own nonce — which cache-aware callers must, see crate::template::render_page_with_nonce — cannot hand in " onload="alert(1) (attribute breakout on every script tag) or x' 'unsafe-inline (rewriting the policy from outside).

It also makes generate() the obvious path, which blunts the other failure mode: a caller hard-coding one static, publicly-known nonce for all users defeats nonce-based CSP entirely.

Implementations

impl CspNonce

pub fn generate() -> Self

Generate a cryptographically random nonce (32 bytes → 44 base64 chars).

pub fn parse(value: &str) -> Result<Self, InvalidNonce>

Validate a caller-supplied nonce.

Accepts the base64 and base64url alphabets only; anything that could break out of an HTML attribute or a CSP directive is rejected.

pub fn as_str(&self) -> &str

The nonce value, for use in a nonce="..." attribute.

Trait Implementations

impl Clone for CspNonce

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CspNonce

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for CspNonce

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for CspNonce

impl PartialEq for CspNonce

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for CspNonce