CSP: Add nonce to slide view inline JS

2017-10-18 17:48:53 +02:00
parent 5d2d3ec875
commit 080436aebb
4 changed files with 11 additions and 2 deletions
--- a/lib/response.js
+++ b/lib/response.js
@@ -584,7 +584,8 @@ function showPublishSlide (req, res, next) {
        lastchangeuserprofile: note.lastchangeuser ? models.User.getProfile(note.lastchangeuser) : null,
        robots: meta.robots || false, // default allow robots
        GA: meta.GA,
-        disqus: meta.disqus
+        disqus: meta.disqus,
+        cspNonce: res.locals.nonce
      }
      return renderPublishSlide(data, res)
    }).catch(function (err) {