Fossil

Check-in [b9d86ed2]
Login

Many hyperlinks are disabled.
Use anonymous login to enable hyperlinks.

Overview
Comment:Applied the new CSP nonce to the <script> tags in the header for the Enhanced Original, Eagle, and Xekri skins, else the clock in the upper right breaks and Chrome gives an error about the CSP violation.
Downloads: Tarball | ZIP archive
Timelines: family | ancestors | descendants | both | csp-nonce
Files: files | file ages | folders
SHA3-256: b9d86ed2616d10d921ff3449f250b8a8dd2eaf8f594812e7826745d3d9933e57
User & Date: wyoung 2018-08-26 03:35:14.445
Context
2018-08-29
11:06
Disallow inline javascript unless protected by a nonce. ... (check-in: ff747b51 user: drh tags: trunk)
2018-08-26
03:35
Applied the new CSP nonce to the <script> tags in the header for the Enhanced Original, Eagle, and Xekri skins, else the clock in the upper right breaks and Chrome gives an error about the CSP violation. ... (Closed-Leaf check-in: b9d86ed2 user: wyoung tags: csp-nonce)
2018-08-25
17:50
Merge enhancements from trunk. ... (check-in: 17b9ecbe user: drh tags: csp-nonce)
Changes
Unified Diff Ignore Whitespace Patch
Changes to skins/eagle/header.txt.
︙︙
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83

     if {[info exists login]} {
       puts "Logged in as $login"
     } else {
       puts "Not logged in"
     }
  </th1></nobr><small><div id="clock"></div></small></div>
</div>
<script>
function updateClock(){
  var e = document.getElementById("clock");
  if(e){
    var d = new Date();
    function f(n) {
      return n < 10 ? '0' + n : n;
    }








|








69
70
71
72
73
74
75
76
77
78
79
80
81
82
83

     if {[info exists login]} {
       puts "Logged in as $login"
     } else {
       puts "Not logged in"
     }
  </th1></nobr><small><div id="clock"></div></small></div>
</div>
<th1>html "<script nonce='$nonce'>"</th1>
function updateClock(){
  var e = document.getElementById("clock");
  if(e){
    var d = new Date();
    function f(n) {
      return n < 10 ? '0' + n : n;
    }
︙︙
Changes to skins/enhanced1/header.txt.
︙︙
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83

     if {[info exists login]} {
       puts "Logged in as $login"
     } else {
       puts "Not logged in"
     }
  </th1></nobr><small><div id="clock"></div></small></div>
</div>
<script>
function updateClock(){
  var e = document.getElementById("clock");
  if(e){
    var d = new Date();
    function f(n) {
      return n < 10 ? '0' + n : n;
    }








|








69
70
71
72
73
74
75
76
77
78
79
80
81
82
83

     if {[info exists login]} {
       puts "Logged in as $login"
     } else {
       puts "Not logged in"
     }
  </th1></nobr><small><div id="clock"></div></small></div>
</div>
<th1>html "<script nonce='$nonce'>"</th1>
function updateClock(){
  var e = document.getElementById("clock");
  if(e){
    var d = new Date();
    function f(n) {
      return n < 10 ? '0' + n : n;
    }
︙︙
Changes to skins/xekri/header.txt.
︙︙
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83

     if {[info exists login]} {
       puts "Logged in as $login"
     } else {
       puts "Not logged in"
     }
  </th1></nobr><small><div id="clock"></div></small></div>
</div>
<script>
function updateClock(){
  var e = document.getElementById("clock");
  if(e){
    var d = new Date();
    function f(n) {
      return n < 10 ? '0' + n : n;
    }








|








69
70
71
72
73
74
75
76
77
78
79
80
81
82
83

     if {[info exists login]} {
       puts "Logged in as $login"
     } else {
       puts "Not logged in"
     }
  </th1></nobr><small><div id="clock"></div></small></div>
</div>
<th1>html "<script nonce='$nonce'>"</th1>
function updateClock(){
  var e = document.getElementById("clock");
  if(e){
    var d = new Date();
    function f(n) {
      return n < 10 ? '0' + n : n;
    }
︙︙