From 38df142eb759a42d44eabb79d1e48713e5d9bc8a Mon Sep 17 00:00:00 2001
From: Jonathan Vollebregt <jnv@jnvsor.net>
Date: Mon, 22 Jul 2024 09:13:17 +0200
Subject: [PATCH] PlainRenderer: Add nonces

---
 src/Renderer/PlainRenderer.php | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

diff --git a/src/Renderer/PlainRenderer.php b/src/Renderer/PlainRenderer.php
index 102555dde..db0f6db98 100644
--- a/src/Renderer/PlainRenderer.php
+++ b/src/Renderer/PlainRenderer.php
@@ -140,10 +140,18 @@ public function preRender(): string
 
                 switch ($type) {
                     case 'script':
-                        $output .= '<script class="kint-plain-script">'.$contents.'</script>';
+                        $output .= '<script class="kint-plain-script"';
+                        if (null !== self::$js_nonce) {
+                            $output .= ' nonce="'.\htmlspecialchars(self::$js_nonce).'"';
+                        }
+                        $output .= '>'.$contents.'</script>';
                         break;
                     case 'style':
-                        $output .= '<style class="kint-plain-style">'.$contents.'</style>';
+                        $output .= '<style class="kint-plain-style"';
+                        if (null !== self::$css_nonce) {
+                            $output .= ' nonce="'.\htmlspecialchars(self::$css_nonce).'"';
+                        }
+                        $output .= '>'.$contents.'</style>';
                         break;
                     default:
                         $output .= $contents;