fix nonce scripts

damienbod · Sep 30, 2023 · ccb27d0 · ccb27d0
1 parent b1b6ec6
commit ccb27d0
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/server/Pages/_Host.cshtml b/server/Pages/_Host.cshtml
@@ -26,11 +26,11 @@
     // The nonce is passed to the client through the HTML to avoid sync issues between tabs
     source = source.Replace("**PLACEHOLDER_NONCE_SERVER**", nonce);
 
-    var nonceScript = $"<script nonce={nonce} type=";
+    var nonceScript = $"<script nonce=\"{nonce}\" type=";
     source = source.Replace("<script type=", nonceScript);
 
     // link rel="stylesheet"
-    var nonceLinkStyle = $"<link nonce={nonce} rel=\"stylesheet";
+    var nonceLinkStyle = $"<link nonce=\"{nonce}\" rel=\"stylesheet";
     source = source.Replace("<link rel=\"stylesheet", nonceLinkStyle);
 
     var xsrf = antiForgery.GetAndStoreTokens(HttpContext);