Fix csp nonce by removing getAttribute. (by PR Tencent#185 )

AricBa · Jan 17, 2019 · dc5464a · dc5464a
1 parent 22bf960
commit dc5464a
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/src/lib/mito.js b/src/lib/mito.js
@@ -65,7 +65,7 @@ export default function render(tpl, data, toString) {
   let scriptList = document.getElementsByTagName('script');
   let nonce = '';
   if (scriptList.length > 0) {
-    nonce = scriptList[0].getAttribute('nonce') || ''; // get nonce to avoid `unsafe-inline`
+    nonce = scriptList[0].nonce || ''; // get nonce to avoid `unsafe-inline`
   }
   let script = document.createElement('SCRIPT');
   script.innerHTML = codeWrap;

diff --git a/src/log/default.js b/src/log/default.js
@@ -178,7 +178,7 @@ class VConsoleDefaultTab extends VConsoleLogTab {
     let scriptList = document.getElementsByTagName('script');
     let nonce = '';
     if (scriptList.length > 0) {
-      nonce = scriptList[0].getAttribute('nonce') || ''; // get nonce to avoid `unsafe-inline`
+      nonce = scriptList[0].nonce || ''; // get nonce to avoid `unsafe-inline`
     }
     let script = document.createElement('SCRIPT');
     script.innerHTML = code;