diff --git a/superset/static/assets/.gitkeep b/superset/static/assets/.gitkeep
deleted file mode 100644
index e69de29bb2..0000000000
diff --git a/superset/templates/appbuilder/baselayout.html b/superset/templates/appbuilder/baselayout.html
index e3ea86f50f..27f5ed88db 100644
--- a/superset/templates/appbuilder/baselayout.html
+++ b/superset/templates/appbuilder/baselayout.html
@@ -21,7 +21,7 @@
 
 {% block body %}
     {% if georchestra and not georchestra.noheader %}
-    <script src="{{ georchestra.headerScript | default('https://cdn.jsdelivr.net/gh/georchestra/header@dist/header.js', true) }}"></script>
+    <script src="{{ georchestra.headerScript | default('https://cdn.jsdelivr.net/gh/georchestra/header@dist/header.js', true) }}" nonce="{{ csp_nonce() }}"></script>
     <geor-header active-app='superset'
         config-file='{{ georchestra.headerConfigFile | default("", true) }}'
         stylesheet='{{ georchestra.georchestraStyleSheet | default ("", true) }}'
diff --git a/superset/templates/superset/basic.html b/superset/templates/superset/basic.html
index 2b7e7362ae..c8599f89b2 100644
--- a/superset/templates/superset/basic.html
+++ b/superset/templates/superset/basic.html
@@ -70,7 +70,7 @@
         value="{{ csrf_token() if csrf_token else '' }}"
       />
       {% if georchestra and not georchestra.noheader %}
-      <script src="{{ georchestra.headerScript | default('https://cdn.jsdelivr.net/gh/georchestra/header@dist/header.js', true) }}"></script>
+      <script src="{{ georchestra.headerScript | default('https://cdn.jsdelivr.net/gh/georchestra/header@dist/header.js', true) }}" nonce="{{ csp_nonce() }}"></script>
       {% endif %}
     </head>