Check-in [12a90ff444]
Not logged in

Many hyperlinks are disabled.
Use anonymous login to enable hyperlinks.

Overview
Comment:Added a nonce attribute to the <script> tag for the inline JavaScript backing the WYSIWYG wiki editor feature. Without this, modern browsers throw a CSP violation.
Timelines: family | ancestors | descendants | both | trunk
Files: files | file ages | folders
SHA3-256:12a90ff44477f056fe30494ba081979eb757f82f8a2c8a63771217cb128837ab
User & Date: wyoung 2018-10-09 16:06:23
Context
2018-10-10
16:42
Removed a period at the end of a sentence ending in a URL to avoid the need for cleverness in URL handling to get the correct document to open. (Affects "fossil help grep" output.) Problem noticed by jungleboogie on the forum, /forumpost/13332107cc.) check-in: fac3d6b0d4 user: wyoung tags: trunk
2018-10-09
16:06
Added a nonce attribute to the <script> tag for the inline JavaScript backing the WYSIWYG wiki editor feature. Without this, modern browsers throw a CSP violation. check-in: 12a90ff444 user: wyoung tags: trunk
15:21
Bolded the card letters in fileformat.wiki and normalized 'X card' vs 'X-card' vs '"X" card' to make it easier to search for a given card type in the document. check-in: a1437b2447 user: wyoung tags: trunk
Changes

Changes to src/wysiwyg.c.

224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
  @ MOaK+bLAOrtLUyt7i5uiUhADs=" />
#endif

  @ </div>
  @ <div id="wysiwygBox"
  @  style="resize:both; overflow:auto; width: %d(w)em; height: %d(h)em;"
  @  contenteditable="true">%s(zContent)</div>
  @ <script>
  @ var oDoc;
  @
  @ /* Initialize the document editor */
  @ function initDoc() {
  @   oDoc = document.getElementById("wysiwygBox");
  @   if (!isWysiwyg()) { setDocMode(true); }
  @ }







|







224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
  @ MOaK+bLAOrtLUyt7i5uiUhADs=" />
#endif

  @ </div>
  @ <div id="wysiwygBox"
  @  style="resize:both; overflow:auto; width: %d(w)em; height: %d(h)em;"
  @  contenteditable="true">%s(zContent)</div>
  @ <script nonce="%h(style_nonce())">
  @ var oDoc;
  @
  @ /* Initialize the document editor */
  @ function initDoc() {
  @   oDoc = document.getElementById("wysiwygBox");
  @   if (!isWysiwyg()) { setDocMode(true); }
  @ }