starred/newznab-tmux
1
0
Fork 0
mirror of https://github.com/NNTmux/newznab-tmux.git synced 2026-08-29 01:08:56 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix some csp issues

Browse Source
This commit is contained in:
DariusIII
2026-02-07 22:23:59 +01:00
parent dedf6e27af
commit 112b2df8af
5 changed files with 18 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
resources/js/alpine/components/admin/features.js
+5
View File
@@ -29,6 +29,11 @@ Alpine.data('tinyMceEditor', () => ({
const script = document.createElement('script');
script.src = 'https://cdn.tiny.cloud/1/' + apiKey + '/tinymce/8/tinymce.min.js';
script.referrerPolicy = 'origin';
// Add CSP nonce for Content Security Policy compliance
const nonceMeta = document.querySelector('meta[name="csp-nonce"]');
if (nonceMeta) {
script.nonce = nonceMeta.content;
}
script.onload = () => this._doInit();
script.onerror = () => {
document.querySelectorAll('#body, .tinymce-editor').forEach(ta => {
resources/js/alpine/components/event-bridge.js
+5
View File
@@ -1195,6 +1195,11 @@ document.querySelectorAll('.progress-bar').forEach(bar => {
const script = document.createElement('script');
script.src = 'https://cdn.tiny.cloud/1/' + apiKey + '/tinymce/7/tinymce.min.js';
script.referrerPolicy = 'origin';
// Add CSP nonce for Content Security Policy compliance
const nonceMeta = document.querySelector('meta[name="csp-nonce"]');
if (nonceMeta) {
script.nonce = nonceMeta.content;
}
script.onload = doInit;
script.onerror = function() { console.error('Failed to load TinyMCE'); };
document.head.appendChild(script);
resources/views/layouts/admin.blade.php
+3
View File
@@ -18,6 +18,9 @@
<!-- TinyMCE API Key -->
<meta name="tinymce-api-key" content="{{ config('tinymce.api_key', 'no-api-key') }}">
<!-- CSP Nonce for dynamic script loading -->
<meta name="csp-nonce" content="{{ csp_nonce() }}">
</head>
<body class="bg-gray-100 dark:bg-gray-900 font-sans antialiased transition-colors duration-200">
<div class="h-screen flex">
resources/views/layouts/main.blade.php
+2
View File
@@ -15,6 +15,8 @@
<!-- Theme Preference - Set via meta tag for CSP compliance -->
<meta name="theme-preference" content="{{ auth()->check() ? (auth()->user()->theme_preference ?? 'light') : 'light' }}">
<!-- CSP Nonce for dynamic script loading -->
<meta name="csp-nonce" content="{{ csp_nonce() }}">
@auth
<meta name="user-authenticated" content="true">
<meta name="update-theme-url" content="{{ route('profile.update-theme') }}">