Add content nonce meta-tag attribute fallback

rails · Sep 30, 2024 · 493409e · 493409e
1 parent f3460a1
commit 493409e
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/src/fetch_response.js b/src/fetch_response.js
@@ -81,8 +81,10 @@ export class FetchResponse {
  if (this.isScript) {
  const script = document.createElement('script')
  const metaTag = document.querySelector('meta[name=csp-nonce]')
- const nonce = metaTag && metaTag.content
- if (nonce) { script.setAttribute('nonce', nonce) }
+ if (metaTag) {
+ const nonce = metaTag.nonce == "" ? metaTag.content : metaTag.nonce
+ if (nonce) { script.setAttribute('nonce', nonce) }
+ }
  script.innerHTML = await this.text
  document.body.appendChild(script)
  } else {