mirrors/hedgedoc
1
0
Fork 0
mirror of https://github.com/hedgedoc/hedgedoc.git synced 2025-05-14 15:14:56 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

CSP: Add nonce to slide view inline JS

Browse source
This commit is contained in:
Literallie 2017-10-18 17:48:53 +02:00
parent 5d2d3ec875
commit 080436aebb
No known key found for this signature in database
GPG key ID: 7BE463C902ED152C
4 changed files with 11 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

3
lib/response.js
View file

@ -584,7 +584,8 @@ function showPublishSlide (req, res, next) {
lastchangeuserprofile: note.lastchangeuser ? models.User.getProfile(note.lastchangeuser) : null,
robots: meta.robots || false, // default allow robots
GA: meta.GA,
disqus: meta.disqus
disqus: meta.disqus,
cspNonce: res.locals.nonce
}
return renderPublishSlide(data, res)
}).catch(function (err) {