docs: update workspace configuration link in security documentation

(cherry picked from commit cdfd073448)
This commit is contained in:
jase88 2025-10-24 09:29:22 +02:00 committed by Kristiyan Kostadinov
parent b3f2ff1e07
commit b97a677730

View file

@ -150,7 +150,7 @@ When serving your Angular application, the server should include a randomly-gene
You must provide this nonce to Angular so that the framework can render `<style>` elements.
You can set the nonce for Angular in one of two ways:
1. Set the `autoCsp` option to `true` the [workspace configuration](workspace-config#extra-build-and-test-options).
1. Set the `autoCsp` option to `true` the [workspace configuration](reference/configs/workspace-config#extra-build-and-test-options).
1. Set the `ngCspNonce` attribute on the root application element as `<app ngCspNonce="randomNonceGoesHere"></app>`. Use this approach if you have access to server-side templating that can add the nonce both to the header and the `index.html` when constructing the response.
1. Provide the nonce using the `CSP_NONCE` injection token. Use this approach if you have access to the nonce at runtime and you want to be able to cache the `index.html`.