Bug 10190: (follow-up) Add missing CSP nonce to inline script tag

Signed-off-by: Nick Clemens <nick@bywatersolutions.com>
Signed-off-by: Pedro Amorim <pedro.amorim@openfifth.co.uk>
This commit is contained in:
Martin Renvoize 2026-03-24 10:12:38 +01:00 committed by Pedro Amorim
parent f2951ab377
commit fabe480e52
No known key found for this signature in database
GPG Key ID: 06B75BA7F3894D55
1 changed files with 1 additions and 1 deletions

View File

@ -30,7 +30,7 @@
<!-- FIXME: this shouldn't be needed -->
[% INCLUDE 'datatables.inc' %]
[% INCLUDE 'js-date-format.inc' %]
<script>
<script nonce="[% Koha.CSPNonce | $raw %]">
const letters = [% To.json(letters) | $raw %];
const default_view = "[%- IF Koha.Preference('DefaultToLoggedInLibraryOverdueTriggers') -%][% Branches.GetLoggedInBranchcode | html %][%- ELSE -%]*[%- END -%]";
const from_branch = "[% Koha.Preference('OverdueNoticeFrom') | html %]";