oci/zeronet
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Expose script nonce for wrapper js obj

Browse source
This commit is contained in:
shortcutme 2018-11-26 00:04:06 +01:00
parent 61cc0a1864
commit 7cbbc33319
No known key found for this signature in database
GPG key ID: 5B63BAE6CB9613AE
2 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
src/Ui/media/Wrapper.coffee
View file

@ -441,9 +441,12 @@ class Wrapper
@log "Setting title to", window.document.title @log "Setting title to", window.document.title
onWrapperLoad: => onWrapperLoad: =>
@script_nonce = window.script_nonce
@wrapper_key = window.wrapper_key
# Cleanup secret variables # Cleanup secret variables
delete window.wrapper delete window.wrapper
delete window.wrapper_key delete window.wrapper_key
delete window.script_nonce
$("#script_init").remove() $("#script_init").remove()
# Send message to innerframe # Send message to innerframe

1
src/Ui/template/wrapper.html
View file

@ -75,6 +75,7 @@ file_inner_path = "{file_inner_path}"
permissions = {permissions} permissions = {permissions}
show_loadingscreen = {show_loadingscreen} show_loadingscreen = {show_loadingscreen}
server_url = '{server_url}' server_url = '{server_url}'
script_nonce = '{script_nonce}'
if (typeof WebSocket === "undefined") { if (typeof WebSocket === "undefined") {
tag = document.createElement('div'); tag = document.createElement('div');