From b97a677730cd8d391ffe3bde76e703c3345ca36a Mon Sep 17 00:00:00 2001
From: jase88 <804836+jase88@users.noreply.github.com>
Date: Fri, 24 Oct 2025 09:29:22 +0200
Subject: [PATCH] docs: update workspace configuration link in security
 documentation

(cherry picked from commit cdfd073448057fb98d1553f306c76d516b8578f4)
---
 adev/src/content/guide/security.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/adev/src/content/guide/security.md b/adev/src/content/guide/security.md
index 83004056b3c..82be3eafa42 100644
--- a/adev/src/content/guide/security.md
+++ b/adev/src/content/guide/security.md
@@ -150,7 +150,7 @@ When serving your Angular application, the server should include a randomly-gene
 You must provide this nonce to Angular so that the framework can render `<style>` elements.
 You can set the nonce for Angular in one of two ways:
 
-1. Set the `autoCsp` option to `true` the [workspace configuration](workspace-config#extra-build-and-test-options).
+1. Set the `autoCsp` option to `true` the [workspace configuration](reference/configs/workspace-config#extra-build-and-test-options).
 1. Set the `ngCspNonce` attribute on the root application element as `<app ngCspNonce="randomNonceGoesHere"></app>`. Use this approach if you have access to server-side templating that can add the nonce both to the header and the `index.html` when constructing the response.
 1. Provide the nonce using the `CSP_NONCE` injection token. Use this approach if you have access to the nonce at runtime and you want to be able to cache the `index.html`.