Add nonces to script tags

LabKey · Feb 16, 2024 · b471a67 · b471a67
1 parent 6ede03e
commit b471a67
Show file tree

Hide file tree

Showing 4 changed files with 4 additions and 4 deletions.
diff --git a/resources/views/importPackages.html b/resources/views/importPackages.html
@@ -1,7 +1,7 @@
 <div xmlns:labkey="http://www.w3.org/1999/xhtml">
 </div>
 
-<script type="text/javascript">
+<script type="text/javascript" nonce="<%=scriptNonce%>">
 
     var selectedFileNames = LABKEY.ActionURL.getParameterArray("file");
     var taskId = LABKEY.ActionURL.getParameter("taskId");

diff --git a/resources/views/test.html b/resources/views/test.html
@@ -36,7 +36,7 @@
 <div class="snd-test-runner-frame"></div>
 <div class="snd-test-data-frame"></div>
 
-<script type="text/javascript">
+<script type="text/javascript" nonce="<%=scriptNonce%>">
 
 
     (function($) {

diff --git a/src/org/labkey/snd/security/view/categorySecurity.jsp b/src/org/labkey/snd/security/view/categorySecurity.jsp
@@ -150,7 +150,7 @@
     }
 </style>
 
-<script type="text/javascript">
+<script type="text/javascript" nonce="<%=getScriptNonce()%>">
 
     function setRole(group, category, role) {
         document.getElementById(group + '_' + category).value = role;

diff --git a/webapp/WEB-INF/snd/sndContext.xml b/webapp/WEB-INF/snd/sndContext.xml
@@ -13,7 +13,7 @@
             <list>
                 <bean class="org.labkey.api.pipeline.file.FileAnalysisTaskPipelineSettings">
                     <constructor-arg value="sndPipeline"/>
-                    <property name="analyzeURL" value="/snd/importPackages.view?"/>
+                    <property name="analyzeURL" value="/snd-importPackages.view"/>
                     <property name="description" value="SND document import"/>
                     <property name="protocolObjectId" value="snd.documentImport"/>
                     <property name="protocolName" value="SND document import"/>