From e0756a56a4f45a2675e0d9c1badabccc79105930 Mon Sep 17 00:00:00 2001 From: shortcutme Date: Mon, 26 Nov 2018 00:13:58 +0100 Subject: [PATCH] Add script_nonce for UiConfig plugin --- plugins/UiConfig/UiConfigPlugin.py | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/plugins/UiConfig/UiConfigPlugin.py b/plugins/UiConfig/UiConfigPlugin.py index 6c6a7982..3610d414 100644 --- a/plugins/UiConfig/UiConfigPlugin.py +++ b/plugins/UiConfig/UiConfigPlugin.py @@ -22,11 +22,14 @@ class UiRequestPlugin(object): if not extra_headers: extra_headers = {} - self.sendHeader(extra_headers=extra_headers) + + script_nonce = self.getScriptNonce() + + self.sendHeader(extra_headers=extra_headers, script_nonce=script_nonce) site = self.server.site_manager.get(config.homepage) return iter([super(UiRequestPlugin, self).renderWrapper( site, path, "uimedia/plugins/uiconfig/config.html", - "Config", extra_headers, show_loadingscreen=False + "Config", extra_headers, show_loadingscreen=False, script_nonce=script_nonce )]) def actionUiMedia(self, path, *args, **kwargs):