From d4a1d2350b646ce7a0ac2750f18b9643c7200455 Mon Sep 17 00:00:00 2001
From: dunglv <dunglv@jajuma/de>
Date: Thu, 26 Dec 2024 16:58:12 +0700
Subject: [PATCH] update for CSP

(cherry picked from commit 66ae382aa8e03b6910456fdcee090a1aec1de9c7)
---
 view/base/templates/custom_widget/hyva_inlinecss.phtml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/view/base/templates/custom_widget/hyva_inlinecss.phtml b/view/base/templates/custom_widget/hyva_inlinecss.phtml
index 34ebf2e..a6463ea 100644
--- a/view/base/templates/custom_widget/hyva_inlinecss.phtml
+++ b/view/base/templates/custom_widget/hyva_inlinecss.phtml
@@ -8,6 +8,8 @@ use Jajuma\PotHoneySpam\Block\PowerToys\HyvaInlineCss;
 use Magento\Framework\Escaper;
 /** @var HyvaInlineCss $block */
 /** @var Escaper $escaper */
+$powerToysHelper = $this->helper(\Jajuma\PowerToys\Helper\Data::class);
+$nonce = $powerToysHelper->getNonce();
 ?>
 <div class="powertoys-widget-title"><?= 'Hyvä InlineCSS' ?></div>
 <?php if ($block->isParentEnable()): ?>
@@ -68,7 +70,7 @@ use Magento\Framework\Escaper;
             </a>
         </div>
     </div>
-    <script>
+    <script <?= $nonce ? 'nonce="' . $nonce . '"' : '' ?>>
         var sizeInlineCssPot = document.querySelector('#info_size_css_content').innerText;
         var inlinecssStatusPot = document.querySelector('#info_inlinecss_status').innerText;
         var timeGeneratePot = document.querySelector('#info_time_generate').innerText;