diff options
| author | Robin Appelman <robin@icewind.nl> | 2016-12-01 15:18:10 +0300 |
|---|---|---|
| committer | Robin Appelman <robin@icewind.nl> | 2016-12-01 15:19:04 +0300 |
| commit | 82dc3b0ce4d9517e3c3a1a3b818e25a23f89ec2a (patch) | |
| tree | 04aa6d0702cb7f903d516193fd13843c60388783 /js | |
| parent | d2626d842649d6c0f42bde5f3c7d0b6e58afd2b2 (diff) | |
add ace-editor patch to make it less easy to forget in the future
Signed-off-by: Robin Appelman <robin@icewind.nl>
Diffstat (limited to 'js')
| -rw-r--r-- | js/add-nounce.patch | 23 |
1 files changed, 23 insertions, 0 deletions
diff --git a/js/add-nounce.patch b/js/add-nounce.patch new file mode 100644 index 0000000..37ba8f8 --- /dev/null +++ b/js/add-nounce.patch @@ -0,0 +1,23 @@ +From 3f6863ca2119d81796dd2e769d1fc42c4547b3e4 Mon Sep 17 00:00:00 2001 +From: Lukas Reschke <lukas@statuscode.ch> +Date: Wed, 30 Nov 2016 17:16:41 +0100 +Subject: [PATCH] Add nonce to loaded JS + +Signed-off-by: Lukas Reschke <lukas@statuscode.ch> +--- + js/core/vendor/ace-builds/src-noconflict/ace.js | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/js/core/vendor/ace-builds/src-noconflict/ace.js b/js/core/vendor/ace-builds/src-noconflict/ace.js +index 2b601cc..19c1ae7 100644 +--- a/js/core/vendor/ace-builds/src-noconflict/ace.js ++++ b/js/core/vendor/ace-builds/src-noconflict/ace.js +@@ -3327,7 +3327,7 @@ exports.get = function (url, callback) { + exports.loadScript = function(path, callback) { + var head = dom.getDocumentHead(); + var s = document.createElement('script'); +- ++ s.setAttribute('nonce', btoa(OC.requestToken)); + s.src = path; + head.appendChild(s); + |