PlainRenderer: Add nonces

jnvsor · Aug 16, 2024 · 38df142 · 38df142
1 parent 70e1b74
commit 38df142
Showing 1 changed file with 10 additions and 2 deletions.
diff --git a/src/Renderer/PlainRenderer.php b/src/Renderer/PlainRenderer.php
@@ -140,10 +140,18 @@ public function preRender(): string
 
                 switch ($type) {
                     case 'script':
-                        $output .= '<script class="kint-plain-script">'.$contents.'</script>';
+                        $output .= '<script class="kint-plain-script"';
+                        if (null !== self::$js_nonce) {
+                            $output .= ' nonce="'.\htmlspecialchars(self::$js_nonce).'"';
+                        }
+                        $output .= '>'.$contents.'</script>';
                         break;
                     case 'style':
-                        $output .= '<style class="kint-plain-style">'.$contents.'</style>';
+                        $output .= '<style class="kint-plain-style"';
+                        if (null !== self::$css_nonce) {
+                            $output .= ' nonce="'.\htmlspecialchars(self::$css_nonce).'"';
+                        }
+                        $output .= '>'.$contents.'</style>';
                         break;
                     default:
                         $output .= $contents;