TD-6277 Nonce console errors but not gmt.js

Phil-NHS · Phil-NHS · commit 4c92b6abdf2d · 2025-09-29T11:37:16.000+01:00
Comment: May be desireable to consider a task to pass the nonce in header, base controller in viewbag and randomly generate it
diff --git a/DigitalLearningSolutions.Web/Startup.cs b/DigitalLearningSolutions.Web/Startup.cs
@@ -658,7 +658,7 @@ public void Configure(IApplicationBuilder app, IMigrationRunner migrationRunner,
                     endpoints.MapControllerRoute("default", "{controller=Home}/{action=Index}")
             );
 
-            migrationRunner.MigrateUp();
+             migrationRunner.MigrateUp();
         }
 
         private Task RedirectToLogin(RedirectContext<CookieAuthenticationOptions> context)
diff --git a/DigitalLearningSolutions.Web/Views/LearningPortal/SelfAssessments/_Layout.cshtml b/DigitalLearningSolutions.Web/Views/LearningPortal/SelfAssessments/_Layout.cshtml
@@ -50,7 +50,7 @@
     {
         @await Html.PartialAsync("~/Views/Shared/_GoogleTagManagerBodyTagJs.cshtml")
     }
-    <script>document.body.className += ' js-enabled' + ('noModule' in HTMLScriptElement.prototype ? ' nhsuk-frontend-supported' : '');</script>
+    <script nonce="random772362">document.body.className += ' js-enabled' + ('noModule' in HTMLScriptElement.prototype ? ' nhsuk-frontend-supported' : '');</script>
     <a class="nhsuk-skip-link" href="#maincontent">Skip to main content</a>
     <div id="pagewrapper">
         <header class="nhsuk-header nhsuk-header--transactional" role="banner">
diff --git a/DigitalLearningSolutions.Web/Views/Shared/_Layout.cshtml b/DigitalLearningSolutions.Web/Views/Shared/_Layout.cshtml
@@ -49,6 +49,7 @@
     <link rel="icon" href="@Url.Content("~/assets/images/favicon.ico")" sizes="48x48">
 
     <!-- Icons -->
+    <!--qqqq these are not being found-->
     <link rel="icon" href="@Url.Content("~/assets/images/favicon.svg")" sizes="any" type="image/svg+xml">
     <link rel="mask-icon" href="@Url.Content("~/assets/images/nhsuk-icon-mask.svg")" color="#005eb8">
     <link rel="apple-touch-icon" href="@Url.Content("~/assets/images/nhsuk-icon-180.png")">
@@ -64,13 +65,13 @@
     <meta name="twitter:title" content="@(ViewData["twitter:title"] ?? ViewData[LayoutViewDataKeys.Title] ?? "Digital Learning Solutions")">
     <meta name="twitter:description" content="@(ViewData["twitter:description"] ?? "")">
 </head>
-
-<body>
+<!-- qqqq go back to the docs do all bodys want this -->
+<body class="nhsuk-frontend-supported">
     @if (cookieConsent == "true")
     {
         @await Html.PartialAsync("~/Views/Shared/_GoogleTagManagerBodyTagJs.cshtml")
     }
-    <script>document.body.className += ' js-enabled' + ('noModule' in HTMLScriptElement.prototype ? ' nhsuk-frontend-supported' : '');</script>
+    <script nonce="random772362">document.body.className += ' js-enabled' + ('noModule' in HTMLScriptElement.prototype ? ' nhsuk-frontend-supported' : '');</script>
     <a class="nhsuk-skip-link" href="#maincontent">Skip to main content</a>
     <div id="pagewrapper">
         <header class="nhsuk-header nhsuk-header--transactional nhsuk-header--white" role="banner">

Original file line number	Diff line number	Diff line change
`@@ -658,7 +658,7 @@ public void Configure(IApplicationBuilder app, IMigrationRunner migrationRunner,`
`658`	`658`	`endpoints.MapControllerRoute("default", "{controller=Home}/{action=Index}")`
`659`	`659`	`);`
`660`	`660`
`661`		`- migrationRunner.MigrateUp();`
	`661`	`+ migrationRunner.MigrateUp();`
`662`	`662`	`}`
`663`	`663`
`664`	`664`	`private Task RedirectToLogin(RedirectContext<CookieAuthenticationOptions> context)`
Original file line number	Diff line number	Diff line change
`@@ -50,7 +50,7 @@`
`50`	`50`	`{`
`51`	`51`	`@await Html.PartialAsync("~/Views/Shared/_GoogleTagManagerBodyTagJs.cshtml")`
`52`	`52`	`}`
`53`		`- <script>document.body.className += ' js-enabled' + ('noModule' in HTMLScriptElement.prototype ? ' nhsuk-frontend-supported' : '');</script>`
	`53`	`+ <script nonce="random772362">document.body.className += ' js-enabled' + ('noModule' in HTMLScriptElement.prototype ? ' nhsuk-frontend-supported' : '');</script>`
`54`	`54`	`<a class="nhsuk-skip-link" href="#maincontent">Skip to main content</a>`
`55`	`55`	`<div id="pagewrapper">`
`56`	`56`	`<header class="nhsuk-header nhsuk-header--transactional" role="banner">`