@User Just looked at those nonce and hash examples. You still have the problem of injecting them into your web.config file which would cause an application restart. So it doesn't look like a goer tbh. Unless anyone has a stealthy way of doing it? Maybe have to use a meta tag instead.