<input type="checkbox" id="" disabled=""

Many thanks <a class="user-mention notranslate" data-hovercard-type="user" data-hoverc

Understood. Many thanks for your help. <span class="email-hidden-t

CSP Nonce support about scribe HOT 4 CLOSED

knuckleswtf commented on August 23, 2024 1

CSP Nonce support

from scribe.

Comments (4)

shalvah commented on August 23, 2024

I'm not very familiar with CSP nonces. But a simple fix that should work:

create a prepend.md file in the docs Markdown output folder (resources/docs/) containing just the html you need:

<head>
...
</head>

It's probably an extra head tag, but the browser should parse and handle it correctly.

You can use append.md to achieve similar functionality too.

https://scribe.readthedocs.io/en/latest/customization.html#specifying-content-to-be-added-to-the-beginning-or-end-of-the-documentation

from scribe.

robtesch commented on August 23, 2024

Many thanks @shalvah , unfortunetely that doesn't quite solve the issue, as the problem is the built in script tags. I don't need to add anything new really, i just have to change what's already there.

The following two script tags:

<script>hljs.initHighlightingOnLoad();</script>

and

<script>
  $(function() {
    var languages = ["bash", "javascript"];
    setupLanguages(languages);
  });
</script>

Would change to something like the following:

<script nonce="{{ csp_nonce() }}">hljs.initHighlightingOnLoad();</script>

and

<script nonce="{{ csp_nonce() }}">
  $(function() {
    var languages = ["bash", "javascript"];
    setupLanguages(languages);
  });
</script>

from scribe.

shalvah commented on August 23, 2024

Ah, no easy way to achieve that. Your best bet is writing maybe a shell script to inject it into the generated Blade file.

from scribe.

robtesch commented on August 23, 2024

Understood. Many thanks for your help.

…

On Tue, 26 May 2020, 23:34 Shalvah, ***@***.***> wrote: Ah, no easy way to achieve that. Your best bet is writing maybe a shell script to inject it into the generated Blade file. — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#28 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AHH7VGISZ6GJVEPF6GMPD5DRTQ7VRANCNFSM4NKIVSSA> .

from scribe.

Recommend Projects