From 68309e5f7b5518679b313272e53382df8c68b1d6 Mon Sep 17 00:00:00 2001
From: the-djmaze <>
Date: Wed, 12 Oct 2022 00:00:06 +0200
Subject: [PATCH] Bugfix: don't set empty CSP script `nonce-`

---
 snappymail/v/0.0.0/app/libraries/RainLoop/Service.php | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/snappymail/v/0.0.0/app/libraries/RainLoop/Service.php b/snappymail/v/0.0.0/app/libraries/RainLoop/Service.php
index 231a93200..a41a42ea8 100644
--- a/snappymail/v/0.0.0/app/libraries/RainLoop/Service.php
+++ b/snappymail/v/0.0.0/app/libraries/RainLoop/Service.php
@@ -249,7 +249,9 @@ abstract class Service
 			$CSP->img[] = 'https:';
 			$CSP->img[] = 'http:';
 		}
-		$CSP->script[] = "'nonce-{$sScriptNonce}'";
+		if ($sScriptNonce) {
+			$CSP->script[] = "'nonce-{$sScriptNonce}'";
+		}
 
 		Api::Actions()->Plugins()->RunHook('main.content-security-policy', array($CSP));