diff --git a/src/Ui/media/Wrapper.coffee b/src/Ui/media/Wrapper.coffee index 11a544a2..5231c500 100644 --- a/src/Ui/media/Wrapper.coffee +++ b/src/Ui/media/Wrapper.coffee @@ -441,9 +441,12 @@ class Wrapper @log "Setting title to", window.document.title onWrapperLoad: => + @script_nonce = window.script_nonce + @wrapper_key = window.wrapper_key # Cleanup secret variables delete window.wrapper delete window.wrapper_key + delete window.script_nonce $("#script_init").remove() # Send message to innerframe diff --git a/src/Ui/template/wrapper.html b/src/Ui/template/wrapper.html index b5337ca9..49144034 100644 --- a/src/Ui/template/wrapper.html +++ b/src/Ui/template/wrapper.html @@ -75,6 +75,7 @@ file_inner_path = "{file_inner_path}" permissions = {permissions} show_loadingscreen = {show_loadingscreen} server_url = '{server_url}' +script_nonce = '{script_nonce}' if (typeof WebSocket === "undefined") { tag = document.createElement('div');