diff options
| author |  Alexandre Alapetite <alexandre@alapetite.fr>
| 2016-02-21 14:23:24 +0100 |
|---|---|---|
| committer | Alexandre Alapetite <alexandre@alapetite.fr>
| 2016-02-21 14:23:24 +0100 |
| commit | e3dc7d46e15d97f8bd008acf3489d5e6c22b8daa (patch) | |
| tree | b7db25c8d0b5d617fa03b5584c193c5576488dea /app/layout/layout.phtml | |
| parent | 64ec0708a1404e1f39a5fdc0131c89b2e4038bee (diff) | |
CSP: Use inline JSON instead of one-time cookie
Simpler, lighter
https://github.com/FreshRSS/FreshRSS/issues/1075
Diffstat (limited to 'app/layout/layout.phtml')
| -rw-r--r-- | app/layout/layout.phtml | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/app/layout/layout.phtml b/app/layout/layout.phtml index 7d718efbd..99a3717bc 100644 --- a/app/layout/layout.phtml +++ b/app/layout/layout.phtml @@ -8,6 +8,9 @@ <meta name="viewport" content="initial-scale=1.0" /> <?php echo self::headTitle(); ?> <?php echo self::headStyle(); ?> + <script id="jsonVars" type="application/json"> +<?php $this->renderHelper('javascript_vars'); ?> + </script> <?php echo self::headScript(); ?> <?php $url_base = Minz_Request::currentRequest(); |