some inline fixes

Author: skerbis

boot.php

@@ -322,12 +322,12 @@
 
             try {
                 $googleConsentModeConfig = GoogleConsentMode::getDomainConfig($domain);
-                $debugScript = '<script>window.consentManagerDebugConfig = ' . json_encode($googleConsentModeConfig) . ';</script>' . PHP_EOL;
+                $debugScript = '<script nonce="' . rex_response::getNonce() . '">window.consentManagerDebugConfig = ' . json_encode($googleConsentModeConfig) . ';</script>' . PHP_EOL;
             } catch (Exception $e) {
-                $debugScript = '<script>window.consentManagerDebugConfig = {"mode": "unknown", "enabled": false};</script>' . PHP_EOL;
+                $debugScript = '<script nonce="' . rex_response::getNonce() . '">window.consentManagerDebugConfig = {"mode": "unknown", "enabled": false};</script>' . PHP_EOL;
             }
 
-            $debugScript .= '<script src="' . $consentDebugUrl . '"></script>' . PHP_EOL;
+            $debugScript .= '<script nonce="' . rex_response::getNonce() . '" src="' . $consentDebugUrl . '"></script>' . PHP_EOL;
 
             // Debug-Script vor </head> einfügen
             $content = $ep->getSubject();

fragments/ConsentManager/box_cssjs.php

@@ -155,8 +155,8 @@
 $jsConfig = [
     'cookieSameSite' => 'Lax',
     'cookieSecure' => rex_request::isHttps(),
-    'cookieName' => 'consentmanager',
-    'cookieLifetime' => 14, // Tage
+    'cookieName' => $addon->getConfig('cookie_name', 'consentmanager'),
+    'cookieLifetime' => (int) $addon->getConfig('lifespan', 14), // Tage
     'domain' => rex_request::server('HTTP_HOST', 'string', ''),
     'version' => $consent_manager->version,
     'cacheLogId' => $consent_manager->cacheLogId,

fragments/ConsentManager/cookiedb.php

@@ -21,11 +21,12 @@
 
 if (0 !== count($consent_manager->cookiegroups)) { /** phpstan-ignore-line */
     // Cookie Consent + History
+    $cookieName = rex_addon::get('consent_manager')->getConfig('cookie_name', 'consentmanager');
     $cookiedata = [];
-    if (is_string(rex_request::cookie('consentmanager'))) {
-        $cookiedata = (array) json_decode(rex_request::cookie('consentmanager'), true);
+    if (is_string(rex_request::cookie($cookieName))) {
+        $cookiedata = (array) json_decode(rex_request::cookie($cookieName), true);
     }
-    $consent_manager_cookie = null !== rex_request::cookie('consentmanager') ? $cookiedata : null;
+    $consent_manager_cookie = null !== rex_request::cookie($cookieName) ? $cookiedata : null;
     if (null !== $consent_manager_cookie && isset($consent_manager_cookie['cachelogid'])) {
         $db = rex_sql::factory();
         $db->setDebug(false);

fragments/ConsentManager/inline_placeholder.php

@@ -121,7 +121,7 @@ class="consent-inline-thumbnail"
             </div>
         </div>
 
-        <script type="text/plain" class="consent-content-data" 
+        <script nonce="<?= rex_response::getNonce() ?>" type="text/plain" class="consent-content-data" 
                 data-consent-code="<?= rex_escape($serviceKey) ?>">
 <?= str_replace('</script>', '<\/script>', $content) ?>
         </script>

lib/InlineConsent.php

@@ -400,11 +400,11 @@ public static function getJavaScript(): string
         $addon = \rex_addon::get('consent_manager');
         $sessionScope = $addon->getConfig('inline_consent_session_scope') ? 'true' : 'false';
 
-        $configScript = '<script>window.consentManagerInlineOptions = { sessionScope: ' . $sessionScope . ' };</script>';
+        $configScript = '<script nonce="' . \rex_response::getNonce() . '">window.consentManagerInlineOptions = { sessionScope: ' . $sessionScope . ' };</script>';
 
         // JavaScript-Datei laden
         $jsPath = rex_url::addonAssets('consent_manager', 'consent_inline.js');
-        return $configScript . '<script defer src="' . $jsPath . '"></script>';
+        return $configScript . '<script nonce="' . \rex_response::getNonce() . '" defer src="' . $jsPath . '"></script>';
     }
 
     /**

pages/help.php

@@ -166,7 +166,7 @@
                 $tocHtml .= '</div></div>';
 
                 // JS for Live Search
-                $tocHtml .= '<script>
+                $tocHtml .= '<script nonce="' . rex_response::getNonce() . '">
                 (function($) {
                     $(document).on("rex:ready", function() {
                         var $input = $("#cm-toc-filter");