update for CSP

(cherry picked from commit 66ae382aa8e03b6910456fdcee090a1aec1de9c7)
JaJuMa-GmbH · Dec 31, 2024 · d4a1d23 · d4a1d23
1 parent 9238ad4
commit d4a1d23
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/view/base/templates/custom_widget/hyva_inlinecss.phtml b/view/base/templates/custom_widget/hyva_inlinecss.phtml
@@ -8,6 +8,8 @@ use Jajuma\PotHoneySpam\Block\PowerToys\HyvaInlineCss;
 use Magento\Framework\Escaper;
 /** @var HyvaInlineCss $block */
 /** @var Escaper $escaper */
+$powerToysHelper = $this->helper(\Jajuma\PowerToys\Helper\Data::class);
+$nonce = $powerToysHelper->getNonce();
 ?>
 <div class="powertoys-widget-title"><?= 'Hyvä InlineCSS' ?></div>
 <?php if ($block->isParentEnable()): ?>
@@ -68,7 +70,7 @@ use Magento\Framework\Escaper;
             </a>
         </div>
     </div>
-    <script>
+    <script <?= $nonce ? 'nonce="' . $nonce . '"' : '' ?>>
         var sizeInlineCssPot = document.querySelector('#info_size_css_content').innerText;
         var inlinecssStatusPot = document.querySelector('#info_inlinecss_status').innerText;
         var timeGeneratePot = document.querySelector('#info_time_generate').innerText;