adding nonce script-src back in

timheuer · timheuer · commit 2c415fc31aa3 · 2023-06-26T21:00:25.000-07:00
diff --git a/src/resxProvider.ts b/src/resxProvider.ts
@@ -136,7 +136,7 @@ export class ResxProvider implements vscode.CustomTextEditorProvider {
                   <meta name="viewport" content="width=device-width, initial-scale=1.0">
                   <meta
                     http-equiv="Content-Security-Policy"
-                    content="default-src 'none'; img-src ${webview.cspSource} https:; script-src ${webview.cspSource}; style-src ${webview.cspSource};"
+                    content="default-src 'none'; img-src ${webview.cspSource} https:; script-src ${webview.cspSource}; style-src ${webview.cspSource}; script-src 'nonce-${nonce}';"
                   />
                 </head>
                 <body>
