Skip to content

Commit 3f409ce

Browse files
committed
DATAAPI-41 add nonce to inline css to ensure it can be included
in sites with strict Content-Security-Policy headers.
1 parent d5c2ff7 commit 3f409ce

File tree

2 files changed

+2
-2
lines changed

2 files changed

+2
-2
lines changed

views/dataApiHtmlDocs/index.cfm

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@
1414
<cfif Len( Trim( spec.info[ "x-favicon" ] ?: "" ) )>
1515
<link rel="shortcut icon" href="#spec.info[ "x-favicon" ]#" type="image/x-icon" />
1616
</cfif>
17-
<style>
17+
<style nonce="#event?.getRequestNonce()#">
1818
<cfinclude template="htmlDocsCss.css" />
1919
</style>
2020
</head>

views/swaggerLayout.cfm

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@
1111
<!--
1212
ReDoc doesn't change outer page styles
1313
-->
14-
<style>
14+
<style nonce="#event?.getRequestNonce()#">
1515
body {
1616
margin: 0;
1717
padding: 0;

0 commit comments

Comments
 (0)