in csp/middleware.py [0:0]
def _make_nonce(self, request: HttpRequest) -> str:
# Ensure that any subsequent calls to request.csp_nonce return the same value
stored_nonce = getattr(request, "_csp_nonce", None)
if isinstance(stored_nonce, str):
return stored_nonce
nonce = base64.b64encode(os.urandom(16)).decode("ascii")
setattr(request, "_csp_nonce", nonce)
return nonce