diff options
author | Stan Hu <stanhu@gmail.com> | 2019-09-12 09:37:51 +0300 |
---|---|---|
committer | Stan Hu <stanhu@gmail.com> | 2019-09-12 09:37:51 +0300 |
commit | e078d51566a276558a0bbd283f8acc472d4530c9 (patch) | |
tree | c416ffdea8847f3e5127ef6f7f20626f4ac5247f /app/views/graphiql | |
parent | 4d70537cd11520b5e1d368b52cfe889d2a57caea (diff) |
Add CSP nonce to graphiql-rails JavaScript
Diffstat (limited to 'app/views/graphiql')
-rw-r--r-- | app/views/graphiql/rails/editors/show.html.erb | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/app/views/graphiql/rails/editors/show.html.erb b/app/views/graphiql/rails/editors/show.html.erb index df54b5821ee..b8f82ae8323 100644 --- a/app/views/graphiql/rails/editors/show.html.erb +++ b/app/views/graphiql/rails/editors/show.html.erb @@ -10,7 +10,7 @@ <div id="graphiql-container"> Loading... </div> - <script> + <%= javascript_tag nonce: true do -%> var parameters = {}; <% if GraphiQL::Rails.config.query_params %> @@ -94,6 +94,6 @@ }), document.getElementById("graphiql-container") ); - </script> + <% end -%> </body> </html> |