Skip to content

fix: adjust webpack nonce generation - #51524

Merged
susnux merged 2 commits into
masterfrom
fix/webpack-nonce
Apr 7, 2025
Merged

fix: adjust webpack nonce generation#51524
susnux merged 2 commits into
masterfrom
fix/webpack-nonce

Conversation

@susnux

Copy link
Copy Markdown
Contributor

Summary

some leftovers where the request token is used instead of the CSP nonce. in general this makes not much difference - but there are some cases where those values differ.

Checklist

@susnuxsusnux added bug 3. to review Waiting for reviews labels Mar 17, 2025
@susnuxsusnux added this to the Nextcloud 32 milestone Mar 17, 2025
@susnux
susnux requested a review from a team as a code ownerMarch 17, 2025 11:28
@susnux
susnux requested review from nfebe, skjnldsv and sorbaugh and removed request for a teamMarch 17, 2025 11:28
@susnux
susnux requested review from artonge and marcelklehr and removed request for sorbaughApril 4, 2025 15:26
@marcelklehr

Copy link
Copy Markdown
Member

Are community app developers aware of this? I was not

@susnux

susnux commented Apr 7, 2025

Copy link
Copy Markdown
ContributorAuthor

Are community app developers aware of this? I was not

It is in the developer upgrade guides since Nextcloud 30 👀
https://docs.nextcloud.com/server/30/developer_manual/app_publishing_maintenance/app_upgrade_guide/upgrade_to_30.html#csp-nonce

But only relevant if you use Webpack, our vite config was adjusted back then to directly make use of it.

some leftovers where the request token is used instead of the CSP nonce.
in general this makes not much difference - but there are some cases
where those values differ.
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
@susnux
susnuxforce-pushed the fix/webpack-nonce branch from d839225 to 47734c2CompareApril 7, 2025 12:44
@susnux

Copy link
Copy Markdown
ContributorAuthor

/compile

@susnux

Copy link
Copy Markdown
ContributorAuthor

/backport to stable31

Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
@susnux
susnux merged commit f540a69 into masterApr 7, 2025
@susnux
susnux deleted the fix/webpack-nonce branch April 7, 2025 15:57
@nextcloud-botnextcloud-bot mentioned this pull request Aug 19, 2025
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to reviewWaiting for reviewsbug

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants

@susnux@marcelklehr@artonge@skjnldsv@nextcloud-command