Update verifier

swiss-ssi-group · Jun 23, 2023 · a6b38f8 · a6b38f8
1 parent b5bf945
commit a6b38f8
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 5 deletions.
diff --git a/VerifierInsuranceCompany/Pages/Shared/_ValidationScriptsPartial.cshtml b/VerifierInsuranceCompany/Pages/Shared/_ValidationScriptsPartial.cshtml
@@ -1,2 +1,5 @@
-<script src="~/lib/jquery-validation/dist/jquery.validate.min.js" ></script>
-<script src="~/lib/jquery-validation-unobtrusive/jquery.validate.unobtrusive.min.js" ></script>
+@{
+    var nonce = this.Context.GetNonce();
+}
+<script src="~/lib/jquery-validation/dist/jquery.validate.min.js" nonce="@nonce"></script>
+<script src="~/lib/jquery-validation-unobtrusive/jquery.validate.unobtrusive.min.js" nonce="@nonce"></script>
diff --git a/VerifierInsuranceCompany/Pages/Verifier.cshtml b/VerifierInsuranceCompany/Pages/Verifier.cshtml
@@ -1,6 +1,7 @@
 @page
 @model VerifierInsuranceCompany.Pages.VerifierModel
 @{
+    var nonce = this.HttpContext.GetNonce();
     ViewData["Title"] = "Verifier";
 }
 
@@ -35,5 +36,5 @@
 
 <div id="pinCodeText" style="display: none"></div>
 
-<script src="qrcode.min.js" ></script>
-<script src="verifier.js" ></script>
+<script src="qrcode.min.js" nonce="@nonce"></script>
+<script src="verifier.js" nonce="@nonce"></script>
diff --git a/VerifierInsuranceCompany/SecurityHeadersDefinitions.cs b/VerifierInsuranceCompany/SecurityHeadersDefinitions.cs
@@ -23,7 +23,7 @@ public static HeaderPolicyCollection GetHeaderPolicyCollection(bool isDev)
                 builder.AddFontSrc().Self();
                 builder.AddBaseUri().Self();
                 builder.AddStyleSrc().Self().UnsafeInline();
-                builder.AddScriptSrc().Self().UnsafeInline();
+                builder.AddScriptSrc().Self().UnsafeInline().WithNonce();
                 builder.AddFrameAncestors().None();
                 //builder.AddCustomDirective("require-trusted-types-for", "'script'");
             })