-
@nhoizey @ChromiumDev Hmm, right. I don't know then, maybe the infrastructure calculates hashes of all known inline scripts? Seems to be the case indeed: web.dev/script-hash-list.json github.com/GoogleChrome/web.dev/blob/019d836bca0a9003c7cdeba6a756b7e1e7f7b333/.eleventy.js#L267 github.com/GoogleChrome/web.dev/blob/019d836bca0a9003c7cdeba6a756b7e1e7f7b333/src/site/_filters/csp-hash.js#L7