Mercurial > p > roundup > code
comparison website/issues/html/user.help.html @ 6218:7146b68ac263
Add client_nonce to all scripts
Add:
tal:attributes="nonce request/client/client_nonce"
to script tags.
| author | John Rouillard <rouilj@ieee.org> |
|---|---|
| date | Thu, 02 Jul 2020 20:05:02 -0400 |
| parents | 53e9694788f5 |
| children | 28aa76443f58 |
comparison
equal
deleted
inserted
replaced
| 6217:10d7700ff6ad | 6218:7146b68ac263 |
|---|---|
| 11 <tal:block tal:condition="python:'property' in request.form"> | 11 <tal:block tal:condition="python:'property' in request.form"> |
| 12 <title><tal:x i18n:translate=""><tal:x i18n:name="property" | 12 <title><tal:x i18n:translate=""><tal:x i18n:name="property" |
| 13 tal:content="property" i18n:translate="" /> help - <span i18n:name="tracker" | 13 tal:content="property" i18n:translate="" /> help - <span i18n:name="tracker" |
| 14 tal:replace="config/TRACKER_NAME" /></tal:x></title> | 14 tal:replace="config/TRACKER_NAME" /></tal:x></title> |
| 15 <script language="Javascript" type="text/javascript" | 15 <script language="Javascript" type="text/javascript" |
| 16 tal:attributes="nonce request/client/client_nonce" | |
| 16 tal:condition=false | 17 tal:condition=false |
| 17 tal:content="structure string:<!-- | 18 tal:content="structure string:<!-- |
| 18 // this is the name of the field in the original form that we're working on | 19 // this is the name of the field in the original form that we're working on |
| 19 form = window.opener.document.${form}; | 20 form = window.opener.document.${form}; |
| 20 field = '${field}'; | 21 field = '${field}'; |
| 21 //-->"> | 22 //-->"> |
| 22 </script> | 23 </script> |
| 23 <script src="@@file/help_controls.js" | 24 <script src="@@file/help_controls.js" |
| 24 tal:condition=false type="text/javascript"><!-- | 25 tal:attributes="nonce request/client/client_nonce" |
| 26 tal:condition=false type="text/javascript"><!-- | |
| 25 //--></script> | 27 //--></script> |
| 26 </tal:block> | 28 </tal:block> |
| 27 </head> | 29 </head> |
| 28 <frameset rows="123,*,62"> | 30 <frameset rows="123,*,62"> |
| 29 <frame src="#" tal:attributes="src string:?@template=help-search&${qs}" name="search"> | 31 <frame src="#" tal:attributes="src string:?@template=help-search&${qs}" name="search"> |