diff --git a/Koha/Cash/Register/Cashup.pm b/Koha/Cash/Register/Cashup.pm
index 01ffb9fcb4..7e6ba1ac64 100644
--- a/Koha/Cash/Register/Cashup.pm
+++ b/Koha/Cash/Register/Cashup.pm
@@ -285,6 +285,21 @@ sub _get_session_boundaries {
     return ( $session_start, $session_end );
 }
 
+=head3 _get_session_end
+
+Internal method to determine the effective end timestamp of the session
+this cashup closes.
+
+For a one-phase cashup, the session ends at C<< $self->timestamp >>.
+For a two-phase workflow (a preceding C<CASHUP_START> with no intervening
+C<CASHUP>), the session ends at the C<CASHUP_START> timestamp so that
+transactions made between C<CASHUP_START> and C<CASHUP> are excluded
+from this cashup's summary.
+
+Returns the session end timestamp.
+
+=cut
+
 sub _get_session_end {
     my ($self) = @_;
 
diff --git a/koha-tmpl/intranet-tmpl/prog/en/includes/modals/cashup_summary.inc b/koha-tmpl/intranet-tmpl/prog/en/includes/modals/cashup_summary.inc
index cd50307449..970115594c 100644
--- a/koha-tmpl/intranet-tmpl/prog/en/includes/modals/cashup_summary.inc
+++ b/koha-tmpl/intranet-tmpl/prog/en/includes/modals/cashup_summary.inc
@@ -23,7 +23,7 @@
                     <tfoot> </tfoot>
                 </table>
 
-                <style>
+                <style nonce="[% Koha.CSPNonce | $raw %]">
                     #cashupSummaryModal .reconciliation-separator hr {
                         margin: 0.5rem 0;
                         border-color: #dee2e6;
diff --git a/t/db_dependent/Koha/Cash/Register/Cashup.t b/t/db_dependent/Koha/Cash/Register/Cashup.t
index 77777d8bee..2996ec2237 100755
--- a/t/db_dependent/Koha/Cash/Register/Cashup.t
+++ b/t/db_dependent/Koha/Cash/Register/Cashup.t
@@ -24,11 +24,16 @@ use Test::More tests => 6;
 use Koha::Database;
 use Koha::DateUtils qw( dt_from_string );
 
+use t::lib::Mocks;
 use t::lib::TestBuilder;
 
 my $builder = t::lib::TestBuilder->new;
 my $schema  = Koha::Database->new->schema;
 
+# Ensure tests do not depend on the site CashupReconciliationNoteRequired
+# preference; this test exercises summary/accountlines, not note enforcement.
+t::lib::Mocks::mock_preference( 'CashupReconciliationNoteRequired', 0 );
+
 subtest 'manager' => sub {
     plan tests => 2;