nonce in script ergänzt (#74)

dergel · web-flow · commit ef5d2656fb25 · 2023-04-19T08:05:45.000+02:00
diff --git a/lib/Watson/Foundation/Extension.php b/lib/Watson/Foundation/Extension.php
@@ -30,7 +30,7 @@ public static function head(\rex_extension_point $ep)
         if ($js_properties) {
             $ep->setSubject($ep->getSubject()."\n".'
 
-                <script type="text/javascript">
+                <script type="text/javascript" nonce="'.\rex_response::getNonce().'">
                     if (typeof($watsonSettings) == "undefined") {
                         var $watsonSettings = '.$js_properties.';
                     }

Original file line number	Diff line number	Diff line change
`@@ -30,7 +30,7 @@ public static function head(\rex_extension_point $ep)`
`30`	`30`	`if ($js_properties) {`
`31`	`31`	`$ep->setSubject($ep->getSubject()."\n".'`
`32`	`32`
`33`		`- <script type="text/javascript">`
	`33`	`+ <script type="text/javascript" nonce="'.\rex_response::getNonce().'">`
`34`	`34`	`if (typeof($watsonSettings) == "undefined") {`
`35`	`35`	`var $watsonSettings = '.$js_properties.';`
`36`	`36`	`}`