From c3eeae5f2081127401056d23db3f03ab1097366b Mon Sep 17 00:00:00 2001
From: dunglv <dunglv@jajuma.de>
Date: Thu, 26 Dec 2024 16:24:16 +0700
Subject: [PATCH] update for CSP

(cherry picked from commit d38e1bb3ca16eefe7d304154c7b247646bd85964)
---
 view/adminhtml/templates/quick_action.phtml | 4 +++-
 view/frontend/templates/quick_action.phtml  | 4 +++-
 2 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/view/adminhtml/templates/quick_action.phtml b/view/adminhtml/templates/quick_action.phtml
index 8f403fd..6edd5b2 100644
--- a/view/adminhtml/templates/quick_action.phtml
+++ b/view/adminhtml/templates/quick_action.phtml
@@ -7,13 +7,15 @@ use Jajuma\PotQuickTranslation\Block\QuickAction;
 
 $magewire = $block->getMagewire();
 $status = $magewire->getCurrentStatusBackend();
+$powerToysHelper = $this->helper(\Jajuma\PowerToys\Helper\Data::class);
+$nonce = $powerToysHelper->getNonce();
 ?>
 
 <div id="pot-quick-translation" wire:loading.class="loading">
     <img src="<?= $block->getIcon(); ?>"/>
     <div class="pot-quick-translation-status <?= $status ? 'is-translate-enable' : '' ?>"></div>
     <a wire:click="backendExecute"><?= $block->getData('name') ?></a>
-    <script>
+    <script <?= $nonce ? 'nonce="' . $nonce . '"' : '' ?>>
         window.addEventListener('finish-quick-translation', event => {
             window.location.reload();
         });
diff --git a/view/frontend/templates/quick_action.phtml b/view/frontend/templates/quick_action.phtml
index 01b4c82..6efa8c5 100644
--- a/view/frontend/templates/quick_action.phtml
+++ b/view/frontend/templates/quick_action.phtml
@@ -7,13 +7,15 @@ use Jajuma\PotQuickTranslation\Block\QuickAction;
 
 $magewire = $block->getMagewire();
 $status = $magewire->getCurrentStatus();
+$powerToysHelper = $this->helper(\Jajuma\PowerToys\Helper\Data::class);
+$nonce = $powerToysHelper->getNonce();
 ?>
 
 <div id="pot-quick-translation" wire:loading.class="loading">
     <img src="<?= $block->getIcon(); ?>"/>
     <div class="pot-quick-translation-status <?= $status ? 'is-translate-enable' : '' ?>"></div>
     <a wire:click="execute"><?= $block->getData('name') ?></a>
-    <script>
+    <script <?= $nonce ? 'nonce="' . $nonce . '"' : '' ?>>
         window.addEventListener('finish-quick-translation', event => {
             let message = event.detail.message;
             if (message !== undefined) {