Contents

// This code was heavily inspired by the rails-ujs project.
// Copyright (c) 2007-2021 Rails Core team.
let nonce = null

const loadCSPNonce = () => {
  if (nonce) {
    return nonce
  }

  const cspMetaTag: HTMLMetaElement = document.querySelector("meta[name=csp-nonce]")

  if (cspMetaTag) {
    nonce = cspMetaTag.content
  }

  return nonce
}

// Returns the Content-Security-Policy nonce for inline scripts.
export const cspNonce = () => (nonce != null ? nonce : loadCSPNonce())

Version data entries

5 entries across 5 versions & 1 rubygems

Version	Path
shoelace-rails-0.4.1	src/turbolinks/utils/csp.ts
shoelace-rails-0.4.0	src/turbolinks/utils/csp.ts
shoelace-rails-0.3.0	src/turbolinks/utils/csp.ts
shoelace-rails-0.2.0	src/turbolinks/utils/csp.ts
shoelace-rails-0.1.0	src/turbolinks/utils/csp.ts