mirror of
https://github.com/vrana/adminer.git
synced 2025-08-08 15:47:00 +02:00
Disallow scripts without nonce
This commit is contained in:
@@ -14,7 +14,7 @@ class AdminerLoginSqlite {
|
||||
|
||||
function loginForm() {
|
||||
?>
|
||||
<script>
|
||||
<script<?php echo nonce(); ?>>
|
||||
addEventListener('load', function () {
|
||||
var driver = qs('name="auth[driver]"');
|
||||
if (isTag(driver, 'select')) {
|
||||
|
@@ -24,7 +24,7 @@ foreach ($tables as $table => $status) {
|
||||
}
|
||||
?>
|
||||
</ul>
|
||||
<script>
|
||||
<script<?php echo nonce(); ?>>
|
||||
var tablesFilterTimeout = null;
|
||||
var tablesFilterValue = '';
|
||||
|
||||
|
@@ -29,7 +29,7 @@ class AdminerTinymce {
|
||||
}
|
||||
echo script_src($this->path);
|
||||
?>
|
||||
<script>
|
||||
<script<?php echo nonce(); ?>>
|
||||
tinyMCE.init({
|
||||
mode: 'none',
|
||||
theme: 'advanced',
|
||||
|
Reference in New Issue
Block a user