diff --git a/system/HTTP/ContentSecurityPolicy.php b/system/HTTP/ContentSecurityPolicy.php
index db1db04e0fdf..54a3d50aa571 100644
--- a/system/HTTP/ContentSecurityPolicy.php
+++ b/system/HTTP/ContentSecurityPolicy.php
@@ -215,6 +215,8 @@ class ContentSecurityPolicy
      * Set of nonces generated.
      *
      * @var list<string>
+     *
+     * @deprecated 4.7.0 Never used.
      */
     protected $nonces = [];
 
diff --git a/user_guide_src/source/changelogs/v4.7.0.rst b/user_guide_src/source/changelogs/v4.7.0.rst
index 562c7f5a4da9..62d68c853617 100644
--- a/user_guide_src/source/changelogs/v4.7.0.rst
+++ b/user_guide_src/source/changelogs/v4.7.0.rst
@@ -367,6 +367,8 @@ Changes
 Deprecations
 ************
 
+- **ContentSecurityPolicy:**
+    - The ``CodeIgniter\HTTP\ContentSecurityPolicy::$nonces`` property has been deprecated. It was never used.
 - **Encryption:**
     - The method ``CodeIgniter\Encryption\Handlers\SodiumHandler::parseParams()`` has been deprecated. Parameters are now handled directly in ``encrypt()`` and ``decrypt()`` methods.
 - **Image:**