nextcloud/core/templates/layout.initial-state.php

<?php
/**
 * SPDX-FileCopyrightText: 2024 Nextcloud GmbH and Nextcloud contributors
 * SPDX-License-Identifier: AGPL-3.0-or-later
 */
?>
<div id="initial-state-container" style="display: none;">
	<?php foreach ($_['initialStates'] as $app => $initialState) { ?>
		<input type="hidden" id="initial-state-<?php p($app); ?>" value="<?php p(base64_encode($initialState)); ?>">
	<?php }?>
</div>
chore(core): wrap initial state into hidden container Signed-off-by: Grigorii K. Shartsev <me@shgk.me> 2024-07-30 07:24:38 -04:00			`<?php`
			`/**`
			`* SPDX-FileCopyrightText: 2024 Nextcloud GmbH and Nextcloud contributors`
			`* SPDX-License-Identifier: AGPL-3.0-or-later`
			`*/`
			`?>`
			`<div id="initial-state-container" style="display: none;">`
feat: Provide CSP nonce as `<meta>` element This way we use the CSP nonce for dynamically loaded scripts. Important to notice: The CSP nonce must NOT be injected in `content` as this can lead to value exfiltration using e.g. side-channel attacts (CSS selectors). Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de> 2024-08-01 17:06:55 -04:00			`<?php foreach ($_['initialStates'] as $app => $initialState) { ?>`
			`<input type="hidden" id="initial-state-<?php p($app); ?>" value="<?php p(base64_encode($initialState)); ?>">`
			`<?php }?>`
chore(core): wrap initial state into hidden container Signed-off-by: Grigorii K. Shartsev <me@shgk.me> 2024-07-30 07:24:38 -04:00			`</div>`