utilize CSP for blocking

1 files changed, 5 insertions, 1 deletions

diff --git a/content/page_actions.js b/content/page_actions.js
index 047bf24..eee0599 100644
--- a/content/page_actions.js
+++ b/content/page_actions.js
@@ -17,6 +17,7 @@
     var port;
     var loaded = false;
     var scripts_awaiting = [];
+    var nonce;
 
     function handle_message(message)
     {
@@ -49,14 +50,17 @@
     {
 	let script = document.createElement("script");
 	script.textContent = script_text;
+	script.setAttribute("nonce", nonce);
 	document.body.appendChild(script);
     }
 
-    function handle_page_actions() {
+    function handle_page_actions(script_nonce) {
 	document.addEventListener("DOMContentLoaded", document_loaded);
 	port = browser.runtime.connect({name : CONNECTION_TYPE.PAGE_ACTIONS});
 	port.onMessage.addListener(handle_message);
 	port.postMessage({url: document.URL});
+
+	nonce = script_nonce;
     }
 
     window.handle_page_actions = handle_page_actions;