Designed and implemented an Apache module to automatically insert script nonces into web pages served by Apache. The module is configured to look for scripts with “some secret value” and replace it with a fresh random SHA-1 value that is also placed in the CSP response header. This helps in preventing XSS attacks.