Dereku/snappymail
1
0
Fork 0
mirror of https://github.com/the-djmaze/snappymail.git synced 2026-09-08 17:07:03 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions

Bugfix: don't set empty CSP script nonce-

Browse source
This commit is contained in:
the-djmaze 2022-10-12 00:00:06 +02:00
parent 5fbca6fe48
commit 68309e5f7b
1 changed files with 3 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

4
snappymail/v/0.0.0/app/libraries/RainLoop/Service.php
View file

@ -249,7 +249,9 @@ abstract class Service
$CSP->img[] = 'https:'; $CSP->img[] = 'https:';
$CSP->img[] = 'http:'; $CSP->img[] = 'http:';
} }
$CSP->script[] = "'nonce-{$sScriptNonce}'"; if ($sScriptNonce) {
$CSP->script[] = "'nonce-{$sScriptNonce}'";
}
Api::Actions()->Plugins()->RunHook('main.content-security-policy', array($CSP)); Api::Actions()->Plugins()->RunHook('main.content-security-policy', array($CSP));