Fossil SCM
Added missing nonce to script tags in the bootstrap skin, one of which caused the submenus to not be properly displayed.
Commit
6b47b08e87911aa6d6be8437b025528358b734b9f96ceabbc4c7d2b135a8609f
Parent
25eae5150c226d9…
2 files changed
+1
-1
+1
-1
+1
-1
| --- skins/bootstrap/footer.txt | ||
| +++ skins/bootstrap/footer.txt | ||
| @@ -7,11 +7,11 @@ | ||
| 7 | 7 | <div id="push"></div> |
| 8 | 8 | </div> |
| 9 | 9 | <footer id="footer"> |
| 10 | 10 | <p>© Copyright $<project_name>. All right reserved. Fossil $release_version · <a href="$home/timeline.rss">RSS</a></p> |
| 11 | 11 | </footer> |
| 12 | -<script> | |
| 12 | +<script nonce="$<nonce>"> | |
| 13 | 13 | var tables = document.querySelectorAll('table'); |
| 14 | 14 | for (var i = 0; i < tables.length; i++) { |
| 15 | 15 | if (tables[i].id !== "timelineTable") |
| 16 | 16 | tables[i].classList.add('table'); |
| 17 | 17 | }; |
| 18 | 18 |
| --- skins/bootstrap/footer.txt | |
| +++ skins/bootstrap/footer.txt | |
| @@ -7,11 +7,11 @@ | |
| 7 | <div id="push"></div> |
| 8 | </div> |
| 9 | <footer id="footer"> |
| 10 | <p>© Copyright $<project_name>. All right reserved. Fossil $release_version · <a href="$home/timeline.rss">RSS</a></p> |
| 11 | </footer> |
| 12 | <script> |
| 13 | var tables = document.querySelectorAll('table'); |
| 14 | for (var i = 0; i < tables.length; i++) { |
| 15 | if (tables[i].id !== "timelineTable") |
| 16 | tables[i].classList.add('table'); |
| 17 | }; |
| 18 |
| --- skins/bootstrap/footer.txt | |
| +++ skins/bootstrap/footer.txt | |
| @@ -7,11 +7,11 @@ | |
| 7 | <div id="push"></div> |
| 8 | </div> |
| 9 | <footer id="footer"> |
| 10 | <p>© Copyright $<project_name>. All right reserved. Fossil $release_version · <a href="$home/timeline.rss">RSS</a></p> |
| 11 | </footer> |
| 12 | <script nonce="$<nonce>"> |
| 13 | var tables = document.querySelectorAll('table'); |
| 14 | for (var i = 0; i < tables.length; i++) { |
| 15 | if (tables[i].id !== "timelineTable") |
| 16 | tables[i].classList.add('table'); |
| 17 | }; |
| 18 |
+1
-1
| --- skins/bootstrap/header.txt | ||
| +++ skins/bootstrap/header.txt | ||
| @@ -5,11 +5,11 @@ | ||
| 5 | 5 | <title>$<project_name>: $<title></title> |
| 6 | 6 | <meta name="viewport" content="width=device-width, initial-scale=1.0"> |
| 7 | 7 | <meta http-equiv="Content-Security-Policy" content="default-src 'self' data:; script-src 'self' 'nonce-$<nonce>'; style-src 'self' 'unsafe-inline'"/> |
| 8 | 8 | <link rel="alternate" type="application/rss+xml" title="RSS Feed" href="$home/timeline.rss" /> |
| 9 | 9 | <link rel="stylesheet" href="$home/style.css?default" type="text/css" media="screen" /> |
| 10 | - <script> | |
| 10 | + <script nonce="$<nonce>"> | |
| 11 | 11 | function gebi(x){ |
| 12 | 12 | if(/^#/.test(x)) x = x.substr(1); |
| 13 | 13 | var e = document.getElementById(x); |
| 14 | 14 | if(!e) throw new Error("Expecting element with ID "+x); |
| 15 | 15 | else return e; |
| 16 | 16 |
| --- skins/bootstrap/header.txt | |
| +++ skins/bootstrap/header.txt | |
| @@ -5,11 +5,11 @@ | |
| 5 | <title>$<project_name>: $<title></title> |
| 6 | <meta name="viewport" content="width=device-width, initial-scale=1.0"> |
| 7 | <meta http-equiv="Content-Security-Policy" content="default-src 'self' data:; script-src 'self' 'nonce-$<nonce>'; style-src 'self' 'unsafe-inline'"/> |
| 8 | <link rel="alternate" type="application/rss+xml" title="RSS Feed" href="$home/timeline.rss" /> |
| 9 | <link rel="stylesheet" href="$home/style.css?default" type="text/css" media="screen" /> |
| 10 | <script> |
| 11 | function gebi(x){ |
| 12 | if(/^#/.test(x)) x = x.substr(1); |
| 13 | var e = document.getElementById(x); |
| 14 | if(!e) throw new Error("Expecting element with ID "+x); |
| 15 | else return e; |
| 16 |
| --- skins/bootstrap/header.txt | |
| +++ skins/bootstrap/header.txt | |
| @@ -5,11 +5,11 @@ | |
| 5 | <title>$<project_name>: $<title></title> |
| 6 | <meta name="viewport" content="width=device-width, initial-scale=1.0"> |
| 7 | <meta http-equiv="Content-Security-Policy" content="default-src 'self' data:; script-src 'self' 'nonce-$<nonce>'; style-src 'self' 'unsafe-inline'"/> |
| 8 | <link rel="alternate" type="application/rss+xml" title="RSS Feed" href="$home/timeline.rss" /> |
| 9 | <link rel="stylesheet" href="$home/style.css?default" type="text/css" media="screen" /> |
| 10 | <script nonce="$<nonce>"> |
| 11 | function gebi(x){ |
| 12 | if(/^#/.test(x)) x = x.substr(1); |
| 13 | var e = document.getElementById(x); |
| 14 | if(!e) throw new Error("Expecting element with ID "+x); |
| 15 | else return e; |
| 16 |