From 55f978d4782633b31eba990192aa4ecc8813a464 Mon Sep 17 00:00:00 2001
From: alokhyland <Alok.Ranjan@Hyland.com>
Date: Wed, 10 Jul 2024 12:41:55 +0530
Subject: [PATCH] WEBUI-1282: Allow Content Security Policy without script-src
 data:

---
 .../src/main/resources/web/nuxeo.war/ui/index.jsp      | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/plugin/web-ui/addon/src/main/resources/web/nuxeo.war/ui/index.jsp b/plugin/web-ui/addon/src/main/resources/web/nuxeo.war/ui/index.jsp
index 8b7231a259..6d546a05e8 100644
--- a/plugin/web-ui/addon/src/main/resources/web/nuxeo.war/ui/index.jsp
+++ b/plugin/web-ui/addon/src/main/resources/web/nuxeo.war/ui/index.jsp
@@ -97,15 +97,15 @@ limitations under the License.
     </div>
   </nuxeo-app>
 
-  <script src="vendor/webcomponentsjs/webcomponents-loader.js"></script>
+  <script src="vendor/webcomponentsjs/webcomponents-loader.js" nonce="dummy"></script>
 
-  <script src="vendor/html-imports/html-imports.min.js"></script>
+  <script src="vendor/html-imports/html-imports.min.js" nonce="dummy"></script>
 
-  <script src="vendor/web-animations/web-animations-next-lite.min.js"></script>
+  <script src="vendor/web-animations/web-animations-next-lite.min.js" nonce="dummy"></script>
 
-  <script src="config.jsp"></script>
+  <script src="config.jsp" nonce="dummy"></script>
 
-  <script src="main.bundle.js"></script>
+  <script src="main.bundle.js" nonce="dummy"></script>
 
 </body>