Merge pull request #1642 from nowackipawel/patch-34

CSP nonce attribute value in ""
codeigniter4 · Jan 1, 2019 · 8a0f7b4 · 8a0f7b4
2 parents ea61c6d + 84149ec
commit 8a0f7b4
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/system/HTTP/ContentSecurityPolicy.php b/system/HTTP/ContentSecurityPolicy.php
@@ -683,7 +683,7 @@ protected function generateNonces(ResponseInterface &$response)
 
 					$this->styleSrc[] = 'nonce-' . $nonce;
 
-					return "nonce={$nonce}";
+					return "nonce=\"{$nonce}\"";
 				}, $body
 		);
 
@@ -694,7 +694,7 @@ protected function generateNonces(ResponseInterface &$response)
 
 					$this->scriptSrc[] = 'nonce-' . $nonce;
 
-					return "nonce={$nonce}";
+					return "nonce=\"{$nonce}\"";
 				}, $body
 		);