JS nonce Felder ergänzt

yakamara · Jan 29, 2023 · cd01501 · cd01501
1 parent 48bf6cf
commit cd01501
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 6 deletions.
diff --git a/module/module_input.inc b/module/module_input.inc
@@ -7,7 +7,7 @@
  */
 
 // module:yform_basic_input
-// v1.1
+// v1.2
 // --------------------------------------------------------------------------------
 
 // DEBUG SELECT
@@ -188,7 +188,7 @@ $mail_display = ($sel=='' || $sel==0) ?' style="display:none"':'';
 
 <p id="yform-formbuilder-info"><?=  rex_addon::get('yform')->getName() . ' ' . rex_addon::get('yform')->getVersion() ?></p>
 
-<script type="text/javascript">
+<script type="text/javascript" nonce="<?php echo rex_response::getNonce(); ?>">
   <!--
   (function($){
 

diff --git a/plugins/manager/ytemplates/bootstrap/value.be_table.tpl.php b/plugins/manager/ytemplates/bootstrap/value.be_table.tpl.php
@@ -75,7 +75,7 @@
     </table>
     <a class="btn btn-primary btn-xs add-mobile-btn" id="<?= $this->getHTMLId() ?>-add-mobile-row" href="javascript:void(0);"><i class="rex-icon rex-icon-add"></i> <?php echo rex_i18n::msg('yform_add_row') ?></a>
 
-    <script type="text/javascript">
+    <script type="text/javascript" nonce="<?php echo rex_response::getNonce(); ?>">
         (function () {
             var wrapper = jQuery('#<?php echo $this->getHTMLId() ?>'),
                 be_table_cnt = <?= (int) $data_index ?>;

diff --git a/ytemplates/bootstrap/value.google_geocode.tpl.php b/ytemplates/bootstrap/value.google_geocode.tpl.php
@@ -22,13 +22,13 @@
 }
 
 if ('' != $googleapikey) {
-    echo '<script type="text/javascript" src="//maps.googleapis.com/maps/api/js?key='.$googleapikey.'&sensor=false"></script>';
+    echo '<script type="text/javascript" src="//maps.googleapis.com/maps/api/js?key='.$googleapikey.'&sensor=false" nonce="' . rex_response::getNonce() . '"></script>';
 } else {
-    echo '<script type="text/javascript" src="//maps.google.com/maps/api/js?sensor=true"></script>';
+    echo '<script type="text/javascript" src="//maps.google.com/maps/api/js?sensor=true" nonce="' . rex_response::getNonce() . '"></script>';
 }
 
 ?>
-<script type="text/javascript">
+<script type="text/javascript" nonce="<?php echo rex_response::getNonce(); ?>">
 
     var rex_geo_coder = function() {