search

basecamp / audits1984

Auditing tool for Rails console sessions
MIT License
358 stars 26 forks source link

Add nonce to script tag #51

Closed olivier-thatch closed 11 months ago

olivier-thatch commented 11 months ago

Add nonce: true to javascript_include_tag directive.

When using a Content Security Policy like script-src: strict-dynamic, Audits1984's script will fail to load unless a nonce is used.

This does nothing when the app does not have a CSP and so should be safe for everyone.

jorgemanrubia commented 11 months ago

Thanks a lot @olivier-thatch 🙏

olivier-thatch commented 10 months ago

@jorgemanrubia No rush at all, but if you could release a new version with this fix, that'd be great :) Merry xmas! 🎄

jorgemanrubia commented 10 months ago

Released 0.1.5 with this one. Thanks!