Tencent / vConsole

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix nonce searching problem #322

Open

sunderls wants to merge 2 commits into Tencent:dev from sunderls:patch-1

sunderls commented Jun 9, 2020

problem

original implementation find the first script without checking if nonce exists

for case of scripts that have src, nonce might not be there because they could be set directly with domains. like script-src: http://domain nonce-xxx

<script src="remote url"/>
<script noce>
</script>

sunderls added 2 commits


          find the first script with nonce

d17fa5c


          find the first script with nonce

67cdffa

tencent-adm commented Jun 9, 2020 •

edited

All committers have signed the CLA.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

You can’t perform that action at this time.