add csp_nonce if it exists

yourlabs · Apr 12, 2024 · 2907da0 · 2907da0
1 parent cb00e5a
commit 2907da0
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/session_security/templates/session_security/all.html b/session_security/templates/session_security/all.html
@@ -24,7 +24,7 @@
 
     {# Bootstrap a SessionSecurity instance as the sessionSecurity global variable #}
     {% localize off %}
-        <script type="text/javascript">
+        <script type="text/javascript"{% if request.csp_nonce %} nonce="{{ request.csp_nonce }}"{% endif %}>
             var sessionSecurity = new yourlabs.SessionSecurity({
                 pingUrl: '{% url 'session_security_ping' %}',
                 warnAfter: {{ request|warn_after|unlocalize }},