fix: Add closing quote for nonce in inline partial script (#2377)

adamgreg · web-flow · commit 9cf838684e8b · 2024-03-21T19:32:53.000+01:00
Fixes #2376
diff --git a/src/server/rendering/fresh_tags.tsx b/src/server/rendering/fresh_tags.tsx
@@ -169,7 +169,7 @@ export function renderFreshTags(
           : null,
       }),
     );
-    const nonce = renderState.csp ? ` nonce="${renderState.getNonce()}` : "";
+    const nonce = renderState.csp ? ` nonce="${renderState.getNonce()}"` : "";
     opts.bodyHtml +=
       `<script id="__FRSH_PARTIAL_DATA_${renderState.renderUuid}" type="application/json"${nonce}>${escapedData}</script>`;
   }

Original file line number	Diff line number	Diff line change
`@@ -169,7 +169,7 @@ export function renderFreshTags(`
`169`	`169`	`: null,`
`170`	`170`	`}),`
`171`	`171`	`);`
`172`		- const nonce = renderState.csp ? ` nonce="${renderState.getNonce()}` : "";
	`172`	+ const nonce = renderState.csp ? ` nonce="${renderState.getNonce()}"` : "";
`173`	`173`	`opts.bodyHtml +=`
`174`	`174`	`<script id="__FRSH_PARTIAL_DATA_${renderState.renderUuid}" type="application/json"${nonce}>${escapedData}</script>`;
`175`	`175`	`}`