diff options
| author | Ferdinand Thiessen <rpm@fthiessen.de> | 2023-01-10 01:40:42 +0100 |
|---|---|---|
| committer | Ferdinand Thiessen <rpm@fthiessen.de> | 2023-02-22 21:19:37 +0100 |
| commit | b642137c652e5262c88dd4ddc055df684c8da8a2 (patch) | |
| tree | 74069a7ffc339e12fca90d62f73e36bbbbf678fe /lib/private/legacy/template/functions.php | |
| parent | 00e041b90704b20a37e2e13b8842d46d616d685d (diff) | |
| download | nextcloud-server-b642137c652e5262c88dd4ddc055df684c8da8a2.tar.gz nextcloud-server-b642137c652e5262c88dd4ddc055df684c8da8a2.zip | |
feat(OC/Template): Add `type="module"` for ES6 scripts
Signed-off-by: Ferdinand Thiessen <rpm@fthiessen.de>
Diffstat (limited to 'lib/private/legacy/template/functions.php')
| -rw-r--r-- | lib/private/legacy/template/functions.php | 16 |
1 files changed, 11 insertions, 5 deletions
diff --git a/lib/private/legacy/template/functions.php b/lib/private/legacy/template/functions.php index 56c488d5abe..7081bd4f743 100644 --- a/lib/private/legacy/template/functions.php +++ b/lib/private/legacy/template/functions.php @@ -72,14 +72,19 @@ function emit_css_loading_tags($obj) { * Prints a <script> tag with nonce and defer depending on config * @param string $src the source URL, ignored when empty * @param string $script_content the inline script content, ignored when empty + * @param string $content_type the type of the source (e.g. 'module') */ -function emit_script_tag($src, $script_content = '') { +function emit_script_tag(string $src, string $script_content = '', string $content_type = '') { + $nonceManager = \OC::$server->get(\OC\Security\CSP\ContentSecurityPolicyNonceManager::class); + $defer_str = ' defer'; - $s = '<script nonce="' . \OC::$server->getContentSecurityPolicyNonceManager()->getNonce() . '"'; + $type = $content_type !== '' ? ' type="' . $content_type . '"' : ''; + + $s = '<script nonce="' . $nonceManager->getNonce() . '"'; if (!empty($src)) { // emit script tag for deferred loading from $src - $s .= $defer_str.' src="' . $src .'">'; - } elseif (!empty($script_content)) { + $s .= $defer_str.' src="' . $src .'"' . $type . '>'; + } elseif ($script_content !== '') { // emit script tag for inline script from $script_content without defer (see MDN) $s .= ">\n".$script_content."\n"; } else { @@ -96,7 +101,8 @@ function emit_script_tag($src, $script_content = '') { */ function emit_script_loading_tags($obj) { foreach ($obj['jsfiles'] as $jsfile) { - emit_script_tag($jsfile, ''); + $type = str_ends_with($jsfile, '.mjs') ? 'module' : ''; + emit_script_tag($jsfile, '', $type); } if (!empty($obj['inline_ocjs'])) { emit_script_tag('', $obj['inline_ocjs']); |