diff --git a/lib/Controller/DisplayController.php b/lib/Controller/DisplayController.php index ad1fa4f..a8f5141 100644 --- a/lib/Controller/DisplayController.php +++ b/lib/Controller/DisplayController.php @@ -57,7 +57,7 @@ public function showMindmapViewer(): TemplateResponse { $policy->addAllowedFontDomain('data:'); $policy->addAllowedImageDomain('*'); $policy->addAllowedConnectDomain('data:'); - $policy->allowEvalScript(true); + $policy->addAllowedScriptDomain('\'unsafe-eval\''); $response->setContentSecurityPolicy($policy); return $response; diff --git a/templates/viewer.php b/templates/viewer.php index 510b738..9192df3 100644 --- a/templates/viewer.php +++ b/templates/viewer.php @@ -5,11 +5,7 @@ $urlGenerator = \OC::$server->get(IURLGenerator::class); $version = \OC::$server[IAppManager::class]->getAppVersion('files_mindmap'); $lang = $_['lang']; - if (method_exists(\OC::$server, 'getContentSecurityPolicyNonceManager')) { - $nonce = \OC::$server->getContentSecurityPolicyNonceManager()->getNonce(); - } else { - $nonce = ''; - } + $nonce = $_['cspNonce'] ?? ''; ?>