Merge pull request #230 from eschulma/patch-1
Update csp-interceptor.md
diff --git a/source/core-developers/csp-interceptor.md b/source/core-developers/csp-interceptor.md
index 83b99f3..2f03623 100644
--- a/source/core-developers/csp-interceptor.md
+++ b/source/core-developers/csp-interceptor.md
@@ -25,11 +25,14 @@
CSP is now supported by all major browsers. [More information about CSP](https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP).
+The interceptor adds a nonce value automatically to to `<s:script>` and `<s:link>` tags. This provides a painless way to
+implement CSP in a highly secure fashion.
+
## Parameters
- `enforcingMode` (default `false`) - When set to "true", the enforce mode has been enabled, and the provided policy
is going to be enforced.
-- `reportUri` - an uri under, which the violations have to be reported.
+- `reportUri` - an uri under which the violations will be reported.
- `prependServletContext` (default `true`) - a flag to prepend or not the Servlet context to the `reportUri`
## Report action
