From c4ed1b8d44c37938aaa9b12674077274554742eb Mon Sep 17 00:00:00 2001 From: Wojtek Kosior Date: Thu, 13 May 2021 12:32:22 +0200 Subject: utilize CSP for blocking --- content/page_actions.js | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) (limited to 'content/page_actions.js') diff --git a/content/page_actions.js b/content/page_actions.js index 047bf24..eee0599 100644 --- a/content/page_actions.js +++ b/content/page_actions.js @@ -17,6 +17,7 @@ var port; var loaded = false; var scripts_awaiting = []; + var nonce; function handle_message(message) { @@ -49,14 +50,17 @@ { let script = document.createElement("script"); script.textContent = script_text; + script.setAttribute("nonce", nonce); document.body.appendChild(script); } - function handle_page_actions() { + function handle_page_actions(script_nonce) { document.addEventListener("DOMContentLoaded", document_loaded); port = browser.runtime.connect({name : CONNECTION_TYPE.PAGE_ACTIONS}); port.onMessage.addListener(handle_message); port.postMessage({url: document.URL}); + + nonce = script_nonce; } window.handle_page_actions = handle_page_actions; -- cgit v1.2.3