Added granular CSP nonce handling for rich renderer

patel-vansh · patel-vansh · commit 1e66fd654b2b · 2026-04-05T15:25:44.000+05:30
diff --git a/system/Autoloader/Autoloader.php b/system/Autoloader/Autoloader.php
@@ -460,8 +460,11 @@ private function configureKint(): void
         }
 
         $csp = service('csp');
-        if ($csp->enabled()) {
+        if ($csp->scriptNonceEnabled()) {
             RichRenderer::$js_nonce  = $csp->getScriptNonce();
+        }
+
+        if ($csp->styleNonceEnabled()) {
             RichRenderer::$css_nonce = $csp->getStyleNonce();
         }
 

Original file line number	Diff line number	Diff line change
`@@ -460,8 +460,11 @@ private function configureKint(): void`
`460`	`460`	`}`
`461`	`461`
`462`	`462`	`$csp = service('csp');`
`463`		`- if ($csp->enabled()) {`
	`463`	`+ if ($csp->scriptNonceEnabled()) {`
`464`	`464`	`RichRenderer::$js_nonce = $csp->getScriptNonce();`
	`465`	`+ }`
	`466`	`+`
	`467`	`+ if ($csp->styleNonceEnabled()) {`
`465`	`468`	`RichRenderer::$css_nonce = $csp->getStyleNonce();`
`466`	`469`	`}`
`467`	`470`