diff --git a/superset/templates/superset/oauth2.html b/superset/templates/superset/oauth2.html
index b46c7a682db..3142834f398 100644
--- a/superset/templates/superset/oauth2.html
+++ b/superset/templates/superset/oauth2.html
@@ -22,7 +22,7 @@ under the License.
     <meta charset="utf-8">
   </head>
   <body>
-    <script>
+    <script nonce="{{ csp_nonce() }}">
       const message = { tabId: '{{ tab_id }}' };
       if (typeof BroadcastChannel !== 'undefined') {
         const channel = new BroadcastChannel('oauth');
