Merge pull request #79 from codergeek121/rename-csp-meta-tag-attribute

Add content nonce meta-tag attribute fallback
rails · Oct 9, 2024 · ea24d2d · ea24d2d
2 parents 7e77fb3 + f9d8834
commit ea24d2d
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/src/fetch_response.js b/src/fetch_response.js
@@ -81,8 +81,10 @@ export class FetchResponse {
     if (this.isScript) {
       const script = document.createElement('script')
       const metaTag = document.querySelector('meta[name=csp-nonce]')
-      const nonce = metaTag && metaTag.content
-      if (nonce) { script.setAttribute('nonce', nonce) }
+      if (metaTag) {
+        const nonce = metaTag.nonce === '' ? metaTag.content : metaTag.nonce
+        if (nonce) { script.setAttribute('nonce', nonce) }
+      }
       script.innerHTML = await this.text
       document.body.appendChild(script)
     } else {