Add nonce to javascipt tag to support strict content security policies (

#42)
kirillplatonov · Sep 4, 2023 · 40ec1d4 · 40ec1d4
1 parent cfa776b
commit 40ec1d4
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/app/views/hotwire/livereload/_head_action_cable.html.erb b/app/views/hotwire/livereload/_head_action_cable.html.erb
@@ -1,3 +1,3 @@
 <% if Rails.env.development? %>
-  <%= javascript_include_tag('hotwire-livereload', defer: true) %>
+  <%= javascript_include_tag('hotwire-livereload', defer: true, nonce: true) %>
 <% end %>
diff --git a/app/views/hotwire/livereload/_head_turbo_stream.html.erb b/app/views/hotwire/livereload/_head_turbo_stream.html.erb
@@ -1,4 +1,4 @@
 <% if Rails.env.development? %>
   <%= turbo_stream_from('hotwire-livereload') %>
-  <%= javascript_include_tag('hotwire-livereload-turbo-stream', defer: true) %>
+  <%= javascript_include_tag('hotwire-livereload-turbo-stream', defer: true, nonce: true) %>
 <% end %>