csp: add nonce to htmx script

gip-inclusion · Jun 19, 2023 · 95a8d42 · 95a8d42
1 parent 45759c5
commit 95a8d42
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/lacommunaute/templates/event/event_calendar.html b/lacommunaute/templates/event/event_calendar.html
@@ -33,7 +33,7 @@ <h1 class="s-title-01__title h1"><strong>Les évènements à venir</strong></h1>
                 <div class="s-section__col col-12">
                     {% if user.is_authenticated %}
                         <a href="{% url 'event:create' %}"
-                            role="button" class="btn btn-primary">
+                           role="button" class="btn btn-primary">
                             {% trans "Post a new Public Event" %}
                         </a>
                     {% else %}
@@ -55,7 +55,7 @@ <h1 class="s-title-01__title h1"><strong>Les évènements à venir</strong></h1>
     <link rel="stylesheet" href="{% static 'vendor/tiva-calendar/css/style.css' %}" />
 {% endblock %}
 {% block extra_js %}
-    <script type="text/javascript" src="{% static 'vendor/htmx-1.8.4/htmx.min.js' %}" defer></script>
+    <script type="text/javascript" src="{% static 'vendor/htmx-1.9.2/htmx.min.js' %}" nonce="{{ request.csp_nonce }}"></script>
     <script type="text/javascript" src="{% static 'vendor/tiva-calendar/js/config.js' %}" defer></script>
     <script type="text/javascript" src="{% static 'vendor/tiva-calendar/js/calendar.js' %}" defer></script>
     <script type="text/javascript" src="{% static 'vendor/tiva-calendar/languages/en.js' %}" defer></script>

diff --git a/lacommunaute/templates/layouts/base.html b/lacommunaute/templates/layouts/base.html
@@ -158,7 +158,7 @@
             {% if COMMU_ENVIRONMENT == 'PROD' %}
                 <script type="text/javascript" src="{% static 'javascripts/matomo.js' %}" defer></script>
             {% endif %}
-            <script type="text/javascript" src="{% static 'vendor/htmx-1.9.2/htmx.min.js' %}"></script>
+            <script type="text/javascript" src="{% static 'vendor/htmx-1.9.2/htmx.min.js' %}" nonce="{{ request.csp_nonce }}"></script>
         {% endblock %}
     </body>
 </html>