mirror of
https://github.com/nextcloud/server.git
synced 2025-02-07 09:59:46 +00:00
2916e5df7e
This way we use the CSP nonce for dynamically loaded scripts. Important to notice: The CSP nonce must NOT be injected in `content` as this can lead to value exfiltration using e.g. side-channel attacts (CSS selectors). Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
11 lines
391 B
PHP
11 lines
391 B
PHP
<?php
|
|
/**
|
|
* SPDX-FileCopyrightText: 2024 Nextcloud GmbH and Nextcloud contributors
|
|
* SPDX-License-Identifier: AGPL-3.0-or-later
|
|
*/
|
|
?>
|
|
<div id="initial-state-container" style="display: none;">
|
|
<?php foreach ($_['initialStates'] as $app => $initialState) { ?>
|
|
<input type="hidden" id="initial-state-<?php p($app); ?>" value="<?php p(base64_encode($initialState)); ?>">
|
|
<?php }?>
|
|
</div>
|