commit

2025-12-19 11:42:49 +08:00
parent e3757077d5
commit 28151ef477
769 changed files with 1270 additions and 1234 deletions
@@ -0,0 +1,41 @@
+package com.budwk.app.web.commons.proc;
+
+import org.nutz.mvc.ActionContext;
+import org.nutz.mvc.impl.processor.AbstractProcessor;
+
+import java.util.Base64;
+
+/**
+ * @ClassName CspProcessor
+ * @Author JyuHsin
+ * @Date 2025/12/19 9:58
+ * @Version 1.0
+ * @Description TODO
+ */
+public class CspProcessor extends AbstractProcessor {
+
+	public void process(ActionContext ac) throws Throwable {
+		// 1. 生成 nonce
+		String nonce = Base64.getEncoder().encodeToString(
+				java.security.SecureRandom.getInstanceStrong().generateSeed(16)
+		);
+
+		// 2. 存入 request，供 Beetl 使用
+		ac.getRequest().setAttribute("cspNonce", nonce);
+
+		// 3. 设置 CSP 头
+		String csp = "default-src 'self'; " +
+				"script-src 'self' 'unsafe-eval' 'nonce-" + nonce + "' https:; " +
+				"worker-src 'self' blob:;" +
+				"style-src * 'unsafe-inline' data:; " +
+				"img-src 'self' data: https:; " +
+				"font-src * data:; " +
+				"connect-src 'self' https:; " +
+				"frame-ancestors 'none'; " +
+				"object-src 'none';";
+
+		ac.getResponse().setHeader("Content-Security-Policy", csp);
+
+		doNext(ac);
+	}
+}
@@ -3,6 +3,7 @@ var chain={
 		"ps" : [
 			  "com.budwk.app.web.commons.proc.LogTimeProcessor",
 			  "com.budwk.app.web.commons.proc.GlobalsSettingProcessor",
+			  "com.budwk.app.web.commons.proc.CspProcessor",
 			  "org.nutz.mvc.impl.processor.UpdateRequestAttributesProcessor",
 		      "org.nutz.mvc.impl.processor.EncodingProcessor",
 		      "org.nutz.mvc.impl.processor.ModuleProcessor",
@@ -217,7 +217,7 @@
 </template>


-<script>
+<script nonce="${cspNonce!}">

 const METHOD_NAME = "change"

@@ -40,7 +40,7 @@

  </el-form>
 </template>
-<script>
+<script nonce="${cspNonce!}">

 const METHOD_NAME = "change"

@@ -59,7 +59,7 @@
  </div>
 </template>

-<script>
+<script nonce="${cspNonce!}">
 module.exports = {
  props: {
    value: {
@@ -93,7 +93,7 @@
  </div>
 </template>

-<script>
+<script nonce="${cspNonce!}">
 module.exports = {
  props: {
    // 上传返回id
@@ -219,7 +219,7 @@ layout("/layouts/v4/baseLayout.html"){
    <div id="sub-app-id" style="display: none"></div>
 </div>

-<script>
+<script nonce="${cspNonce!}">
    // 初始化pjax加载
    ;(function initPjax() {
        $(document).pjax("#sidebar-menu a[data-pjax]", "#sub-app-container-main-content-body", {
@@ -70,19 +70,13 @@
    <script src="${base!}/assets/platform/plugins/g2plot/g2plot.min.js"></script>

 <!--    <script src="https://cdn.jsdelivr.net/npm/goober@2.1.10/dist/goober.umd.js"></script>-->
-
-    <script>
-        window._AMapSecurityConfig = {
-            securityJsCode: "4fa1e1aeabba7eb9518129cf57ab17c1"
-        }
-    </script>
    <script
            type="text/javascript"
            src="https://webapi.amap.com/maps?v=2.0&key=57f0d098ba1b881ecc436c4cfd23bbbf&plugin=AMap.PolyEditor,AMap.Geolocation"
    ></script>

    <script src="https://map.qq.com/api/gljs?v=2.exp&key=MLLBZ-GQECI-ASXG7-5GNOZ-XW2OF-H5BVH"></script>
-    <script>
+    <script nonce="${cspNonce!}">
        Vue.config.devtools = true

        // 禁用vant的表单验证行内错误信息显示
@@ -183,7 +177,7 @@
    </script>

    <!--ws-->
-    <script type="text/javascript">
+    <script nonce="${cspNonce!}" type="text/javascript">
        class WebSocketPubSub {
            constructor() {
                this.ws = null
@@ -331,7 +325,7 @@
    </script>

    <!--vuex-->
-    <script>
+    <script nonce="${cspNonce!}">
        const store = new Vuex.Store({
            plugins: [createPersistedState({
                key: "zhgh-h5-vuex",
@@ -370,7 +364,7 @@
        })
    </script>

-    <script type="text/javascript">
+    <script nonce="${cspNonce!}" type="text/javascript">
        //挂载
        Vue.prototype.$moment = moment
        Vue.prototype.$businessTool = businessTool
@@ -382,7 +376,7 @@
        Vue.prototype.$pjaxReplace = pjaxReplace
    </script>

-    <script>
+    <script nonce="${cspNonce!}">
        Vue.component("rich-text", httpVueLoader("/components/plugins/sysRichTextView/index.vue?v=" + new Date().getTime()))
        Vue.component("h5-file-upload", httpVueLoader("/components/plugins/sysUpload/h5Index.vue?v=" + new Date().getTime()))
        Vue.component("h5-signature", httpVueLoader("/components/plugins/sysSignature/h5Index.vue?v=" + new Date().getTime()))
@@ -403,7 +397,7 @@
        <div id="container">${layoutContent}</div>
    </div>
 </div>
-<script>
+<script nonce="${cspNonce!}">
    toggleShowBar()
 </script>
 </body>
@@ -415,7 +415,7 @@ layout("/layouts/v4/baseLayout.html"){
    </div>
 </div>

-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: "#app",
        data: {
@@ -100,7 +100,7 @@

        <script src="https://map.qq.com/api/gljs?v=2.exp&key=MLLBZ-GQECI-ASXG7-5GNOZ-XW2OF-H5BVH"></script>

-        <script>
+        <script nonce="${cspNonce!}">
            // 在加载 lodash 后、使用前插入
            const originalDefaultsDeep = window._.defaultsDeep;
            window._.defaultsDeep = function(...args) {
@@ -125,7 +125,7 @@
            }
        </script>

-        <script type="text/javascript">
+        <script nonce="${cspNonce!}" type="text/javascript">
            Vue.config.devtools = false
            ELEMENT.locale(ELEMENT.lang["${lang,escape}"])
            ELEMENT.Dialog.props.closeOnClickModal.default = false
@@ -142,12 +142,12 @@
        </script>

        <!--广播频道-->
-        <script type="text/javascript">
+        <script nonce="${cspNonce!}" type="text/javascript">
            window.GlobalBroadcastChannel = new BroadcastChannel("zhgh-global-channel")
        </script>

        <!--ws-->
-        <script type="text/javascript">
+        <script nonce="${cspNonce!}" type="text/javascript">
            class WebSocketPubSub {
                constructor() {
                    this.ws = null
@@ -297,7 +297,7 @@
        </script>

        <!--vuex-->
-        <script type="text/javascript">
+        <script nonce="${cspNonce!}" type="text/javascript">
            window.store = new Vuex.Store({
                plugins: [
                    createPersistedState({
@@ -337,13 +337,13 @@
        </script>

        <!--beetl全局变量方法-->
-        <script type="text/javascript">
+        <script nonce="${cspNonce!}" type="text/javascript">
            const base = "${base!}"
            const APP_DOMAIN = "${AppDomain!}"
        </script>

        <!--vue挂载-->
-        <script type="text/javascript">
+        <script nonce="${cspNonce!}" type="text/javascript">
            Vue.prototype.$moment = moment
            Vue.prototype.$businessTool = businessTool
            Vue.prototype.$commonUtil = commonUtil
@@ -354,7 +354,7 @@
        </script>

        <!--vue全局组件-->
-        <script>
+        <script nonce="${cspNonce!}">
            Vue.component(VueQrcode.name, VueQrcode)
            Vue.component("guava", httpVueLoader("/components/plugins/Guava.vue?v=" + new Date().getTime()))
            Vue.component("enum-tag", httpVueLoader("/components/plugins/sysEnum/EnumTag.vue?v=" + new Date().getTime()))
@@ -698,7 +698,7 @@
        </footer>


-        <script>
+        <script nonce="${cspNonce!}">
            // 处理导航项的active状态
            $(document).ready(function () {
                // 控制页脚显示的函数
@@ -1999,7 +1999,7 @@ layout("/layouts/v4/baseLayout.html"){
    </div>
 </div>

-<script>
+<script nonce="${cspNonce!}">
    const vue = new Vue({
        el: "#v4-home-app",
        data() {
@@ -90,7 +90,7 @@ layout("/layouts/v4/baseLayout.html"){

 </div>

-<script>
+<script nonce="${cspNonce!}">
    <!--#include("act.js"){}#-->
    <!--#include("jcdt.js"){}#-->
    <!--#include("entry.js"){}#-->
@@ -305,7 +305,7 @@ layout("/layouts/v4/baseLayout.html"){
    </el-dialog>
 </div>

-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: '#app',
        data() {
@@ -117,7 +117,7 @@ layout("/layouts/v4/baseLayout.html"){
    </div>
 </div>

-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: "#v4-person-center",
        data() {
@@ -277,7 +277,7 @@
            <div class="ele-body" id="container">${layoutContent}</div>
        </main>

-        <script>
+        <script nonce="${cspNonce!}">
            // 处理导航项的active状态
            $(document).ready(function() {
                // 初始化：根据当前URL设置active状态
@@ -400,7 +400,7 @@ layout("/layouts/v4/baseLayout.html"){
    </div>
 </div>

-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: "#app",
        data: {
@@ -300,7 +300,7 @@ layout("/layouts/v4/platform.html"){
    </main>
 </div>

-<script>
+<script nonce="${cspNonce!}">
    document.addEventListener("DOMContentLoaded", function () {
        const menuLinks = document.querySelectorAll(".menu-link")
        const contentTitle = document.querySelector(".content-title")
@@ -276,7 +276,7 @@ layout("/layouts/v4/baseLayout.html"){
    </div>
 </div>

-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: "#app",
        data() {
@@ -88,7 +88,7 @@ layout("/layouts/platform.html"){
    </el-dialog>
 </div>

-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: "#app",
        mixins: [initTableMixins],
@@ -64,7 +64,7 @@ layout("/layouts/platform.html"){

 <!--<script src="https://unpkg.com/bpmn-js@17.9.0/dist/bpmn-modeler.development.js"></script>-->

-<script>
+<script nonce="${cspNonce!}">
    var bpmnModeler

    new Vue({
@@ -220,7 +220,7 @@ layout("/layouts/platform.html"){
    <!--    </div>-->
 </div>

-<script>
+<script nonce="${cspNonce!}">
    const vue = new Vue({
        el: "#app",
        mixins: [initTableMixins],
@@ -64,7 +64,7 @@ layout("/layouts/platform.html"){

 </div>

-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: "#app",
        mixins: [initTableMixins],
@@ -19,7 +19,7 @@ layout("/layouts/v4/baseLayout.html"){
    ></snaker-flow>
 </div>

-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: "#flowCommonApprovalForm",
        data() {
@@ -81,7 +81,7 @@ layout("/layouts/platform.html"){
    </el-dialog>
 </div>

-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: "#app",
        mixins: [initTableMixins],
@@ -212,7 +212,7 @@
    </div>
 </div>
 </body>
-<script>
+<script nonce="${cspNonce!}">
    Vue.use(SnakerflowDesigner.default)
    const vue = new Vue({
        el: "#snaker-flow-preview",
@@ -76,7 +76,7 @@
        <script src="/assets/platform/plugins/snaker/snaker.designer.js" type="text/javascript"></script>
        <script src="/assets/platform/plugins/snaker/snaker.model.js" charset="utf-8" type="text/javascript"></script>
        <script src="/assets/platform/plugins/snaker/snaker.editors.js" type="text/javascript"></script>
-        <script>
+        <script nonce="${cspNonce!}">
            const processId = "${processId!}"
            console.log(processId)

@@ -99,7 +99,7 @@ layout("/layouts/platform.html"){

 </div>

-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: "#app",
        mixins: [initTableMixins],
@@ -94,7 +94,7 @@
            </snaker-flow-designer>
        </div>
    </body>
-    <script>
+    <script nonce="${cspNonce!}">
        <!--#include('assigneeForm.js'){}#-->
        <!--#include('buttonConfig.js'){}#-->

@@ -132,7 +132,7 @@ layout("/layouts/platform.html"){

 </div>

-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: "#app",
        mixins: [initTableMixins],
@@ -29,7 +29,7 @@ layout("/layouts/platform.html"){
    </el-card>
 </div>

-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: "#app",
        mixins: [initTableMixins],
@@ -97,7 +97,7 @@ layout("/layouts/platform.html"){
    </el-dialog>
 </div>

-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: "#app",
        mixins: [initTableMixins],
@@ -317,7 +317,7 @@ layout("/layouts/v4/baseLayout.html"){
    </div>
 </div>

-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: "#app",
        data() {
@@ -21,7 +21,7 @@ layout("/layouts/platform.html"){
        </div>
    </div>
 </div>
-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: "#app",
        store: store
@@ -21,7 +21,7 @@ layout("/layouts/platform.html"){
        </div>
    </div>
 </div>
-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: "#app",
        store: store
@@ -21,7 +21,7 @@ layout("/layouts/platform.html"){
        </div>
    </div>
 </div>
-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: "#app",
        store: store
@@ -76,7 +76,7 @@ layout("/layouts/platform.html"){
        </span>
    </el-dialog>
 </div>
-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: "#app",
        data: function () {
@@ -116,7 +116,7 @@ layout("/layouts/platform.html"){
        </span>
    </el-dialog>
 </div>
-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: "#app",
        data: function () {
@@ -4,7 +4,7 @@ layout("/layouts/platform.html"){
 <div id="app" v-cloak>
    <file-upload upload_mode="drag"></file-upload>
 </div>
-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: "#app",
        data() {
@@ -4,7 +4,7 @@ layout("/layouts/platform.html"){

 <div id="app" v-cloak></div>

-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: "#app"
    })
@@ -107,7 +107,7 @@ layout("/layouts/platform.html"){
    </el-dialog>
 </div>

-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: "#app",
        mixins: [initTableMixins],
@@ -131,7 +131,7 @@ layout("/layouts/platform.html"){
 	</el-dialog>
 </div>

-<script>
+<script nonce="${cspNonce!}">
 	<!--#include("../../../zhgh/staffmanage/member/change/common/memberAllChangeInfo.js"){}#-->

 	new Vue({
@@ -127,7 +127,7 @@ layout("/layouts/platform.html"){
        </span>
    </el-dialog>
 </div>
-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: "#app",
        data: function () {
@@ -77,7 +77,7 @@ layout("/layouts/platform.html"){
    </el-dialog>
 </div>

-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: "#app",
        mixins: [initTableMixins],
@@ -200,7 +200,7 @@
 <!-- import JavaScript -->
 <script src="${base!}/assets/platform/plugins/element-ui/lib/index.js"></script>
 <script src="${base!}/assets/platform/plugins/jquery/jquery.js"></script>
-<script>
+<script nonce="${cspNonce!}">
    var MSGINIT = "发送验证码"
    var MSGSCUCCESS = "{time}秒后重发"
    var MSGTIME = 60
@@ -78,7 +78,7 @@
            </div>
        </div>
    </body>
-    <script>
+    <script nonce="${cspNonce!}">
        new Vue({
            el: "#app",
            data() {
@@ -265,7 +265,7 @@ layout("/layouts/platform.html"){
    <el-button type="primary" icon="el-icon-edit" @click="$refs.icon.showIconModal()">cxccc</el-button>
    <icon-selector ref="icon" v-model="icon"></icon-selector>
 </div>
-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: "#app",
        components: {
@@ -63,7 +63,7 @@ layout("/layouts/platform.html"){
    </el-card>
 </div>

-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: "#app",
        mixins: [initTableMixins],
@@ -82,7 +82,7 @@ layout("/layouts/platform.html"){

 </div>

-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: "#app",
        data: function () {
@@ -99,7 +99,7 @@
    <script src="${base!}/assets/platform/js/util/commonUtil.js"></script>
    <!-- import jsencrypt-->
    <script src="${base!}/assets/platform/plugins/jsencrypt/jsencrypt.min.js"></script>
-    <script>
+    <script nonce="${cspNonce!}">
        // 在加载 lodash 后、使用前插入
        const originalDefaultsDeep = window._.defaultsDeep;
        window._.defaultsDeep = function(...args) {
@@ -123,7 +123,7 @@
            return clean;
        }
    </script>
-    <script>
+    <script nonce="${cspNonce!}">
        new Vue({
            el: "#app",
            data() {
@@ -140,7 +140,7 @@ layout("/layouts/platform.html"){
    <sort ref="sortRef" @refresh="doSearch"></sort>
    <recommend-setting ref="recommendSettingRef" @refresh="doSearch"></recommend-setting>
 </div>
-<script>
+<script nonce="${cspNonce!}">
    <!--#include("permissionForm.js"){}#-->
    <!--#include("basicForm.js"){}#-->
    <!--#include("sort.js"){}#-->
@@ -256,7 +256,7 @@ layout("/layouts/platform.html"){
        </span>
    </el-dialog>
 </div>
-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: "#app",
        data: function () {
@@ -87,7 +87,7 @@ layout("/layouts/platform.html"){
    </el-dialog>
 </div>

-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: "#app",
        dicts: ["SYS_MENU_PLATFORM"],
@@ -88,7 +88,7 @@ layout("/layouts/platform.html"){
        <file-preview complete_result :files="nodeData.files"></file-preview>
    </el-dialog>
 </div>
-<script>
+<script nonce="${cspNonce!}">
    <!--#include("msgManage/msgManageForm.js"){}#-->
    <!--#include("msgManage/viewUser.js"){}#-->
    new Vue({
@@ -85,7 +85,7 @@ layout("/layouts/platform.html"){
    </el-dialog>
 </div>

-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: "#app",
        store,
@@ -102,7 +102,7 @@ layout("/layouts/platform.html"){
        </span>
    </el-dialog>
 </div>
-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: "#app",
        mixins: [initTableMixins],
@@ -82,7 +82,7 @@ layout("/layouts/platform.html"){
        </el-row>
    </el-card>
 </div>
-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: "#app",
        data: function () {
@@ -82,7 +82,7 @@ layout("/layouts/platform.html"){
        </el-row>
    </el-card>
 </div>
-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: "#app",
        data: function () {
@@ -4,7 +4,7 @@ layout("/layouts/platform.html"){
 <div id="app" v-cloak>
    <el-alert title="对不起，您没有权限访问该页面。" type="error"></el-alert>
 </div>
-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: "#app"
    })
@@ -52,7 +52,7 @@ layout("/layouts/platform.html"){
    </el-dialog>
 </div>

-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: "#app",
        mixins: [initTableMixins],
@@ -350,7 +350,7 @@ layout("/layouts/platform.html"){
    <sort ref="sortRef" @refresh="doSearch"></sort>

 </div>
-<script>
+<script nonce="${cspNonce!}">
    <!--#include("sort.js"){}#-->

    const vue = new Vue({
@@ -97,7 +97,7 @@ layout("/layouts/platform.html"){
        </span>
    </el-dialog>
 </div>
-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: "#app",
        data: function () {
@@ -16,7 +16,7 @@
            <signature @save="save"></signature>
        </div>
    </body>
-    <script>
+    <script nonce="${cspNonce!}">
        new Vue({
            el: "#app",
            components: {
@@ -33,7 +33,7 @@
                text-align: -webkit-center; /*Chrome*/
            }
        </style>
-        <script>
+        <script nonce="${cspNonce!}">
            var base = "${base!}"
        </script>
    </head>
@@ -104,7 +104,7 @@ layout("/layouts/platform.html"){
        </span>
    </el-dialog>
 </div>
-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: "#app",
        data: function () {
@@ -104,7 +104,7 @@ layout("/layouts/platform.html"){
 	</guava>
 </div>

-<script>
+<script nonce="${cspNonce!}">
    <!--#include("branchUnionManage.js"){}#-->
    <!--#include("schoolUnionUserManage.js"){}#-->
    <!--#include("branchUnionUserManage.js"){}#-->
@@ -79,7 +79,7 @@ layout("/layouts/platform.html"){
        </el-col>
    </el-row>
 </div>
-<script>
+<script nonce="${cspNonce!}">
    <!--#include("unitUser.js"){}#-->
    <!--#include("unitManage.js"){}#-->
    <!--#include("unitLeader.js"){}#-->
@@ -172,7 +172,7 @@ layout("/layouts/platform.html"){
        </span>
    </el-dialog>
 </div>
-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: "#app",
        mixins: [initTableMixins],
@@ -53,7 +53,7 @@
        </span>
    </div>
 </div>
-<script type="text/javascript">
+<script nonce="${cspNonce!}" type="text/javascript">
    new Vue({
        el: "#passApp",
        data: function () {
@@ -276,7 +276,7 @@ layout("/layouts/platform.html"){
    </guava>
 </div>

-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: "#app",
        mixins: [initTableMixins],
@@ -106,7 +106,7 @@ layout("/layouts/platform.html"){
    </el-dialog>
 </div>

-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: "#app",
        mixins: [initTableMixins],
@@ -43,7 +43,7 @@ layout("/layouts/platform.html"){
    </el-row>
 </div>

-<script>
+<script nonce="${cspNonce!}">
    <!--#include("activityBasicBranchUnionManage.js"){}#-->
    <!--#include("activityBasicBranchUnionPartUnitManage.js"){}#-->
    new Vue({
@@ -88,7 +88,7 @@ layout("/layouts/platform.html"){
    </el-row>
 </div>

-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: "#app",
        mixins: [initTableMixins],
@@ -8,7 +8,7 @@ layout("/layouts/platform.html"){
    </guava>
 </div>

-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: "#app",
        mixins: [initTableMixins],
@@ -8,7 +8,7 @@ layout("/layouts/platform.html"){
    </guava>
 </div>

-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: "#app",
        mixins: [initTableMixins],
@@ -7,7 +7,7 @@ layout("/layouts/platform.html"){
        <activity-culture-apply-activity :activity_type="activityType" ref="activityApply"></activity-culture-apply-activity>
    </guava>
 </div>
-<script>
+<script nonce="${cspNonce!}">
    <!--#include("../../common/applyActivity.js"){}#-->
    new Vue({
        el: "#app",
@@ -8,7 +8,7 @@ layout("/layouts/platform.html"){
    </guava>
 </div>

-<script>
+<script nonce="${cspNonce!}">
    <!--#include("../../common/applyUser.js"){}#-->
    new Vue({
        el: "#app",
@@ -6,7 +6,7 @@ layout("/layouts/platform.html"){
    <activity-culture-audit-activity :activity_type="activityType"></activity-culture-audit-activity>
 </div>

-<script>
+<script nonce="${cspNonce!}">
    <!--#include("../../common/auditActivity.js"){}#-->
    new Vue({
        el: "#app",
@@ -6,7 +6,7 @@ layout("/layouts/platform.html"){
    <activity-culture-info-manage :activity_type="activityType"></activity-culture-info-manage>
 </div>

-<script>
+<script nonce="${cspNonce!}">
    <!--#include("../../common/infoMange.js"){}#-->
    new Vue({
        el: "#app",
@@ -8,7 +8,7 @@ layout("/layouts/platform.html"){
    </guava>
 </div>

-<script>
+<script nonce="${cspNonce!}">
    <!--#include("../../common/userStatistics.js"){}#-->
    new Vue({
        el: "#app",
@@ -8,7 +8,7 @@ layout("/layouts/platform.html"){
    </guava>
 </div>

-<script>
+<script nonce="${cspNonce!}">
    <!--#include("../../common/applyActivity.js"){}#-->
    new Vue({
        el: "#app",
@@ -8,7 +8,7 @@ layout("/layouts/platform.html"){
    </guava>
 </div>

-<script>
+<script nonce="${cspNonce!}">
    <!--#include("../../common/applyUser.js"){}#-->
    new Vue({
        el: "#app",
@@ -6,7 +6,7 @@ layout("/layouts/platform.html"){
    <activity-culture-info-manage :activity_type="activityType"></activity-culture-info-manage>
 </div>

-<script>
+<script nonce="${cspNonce!}">
    <!--#include("../../common/infoMange.js"){}#-->
    new Vue({
        el: "#app",
@@ -8,7 +8,7 @@ layout("/layouts/platform.html"){
    </guava>
 </div>

-<script>
+<script nonce="${cspNonce!}">
    <!--#include("../../common/userStatistics.js"){}#-->
    new Vue({
        el: "#app",
@@ -7,7 +7,7 @@ layout("/layouts/platform.html"){
        <activity-culture-apply-activity :activity_type="activityType" ref="activityApply"></activity-culture-apply-activity>
    </guava>
 </div>
-<script>
+<script nonce="${cspNonce!}">
    <!--#include("../../common/applyActivity.js"){}#-->
    new Vue({
        el: "#app",
@@ -8,7 +8,7 @@ layout("/layouts/platform.html"){
    </guava>
 </div>

-<script>
+<script nonce="${cspNonce!}">
    <!--#include("../../common/applyUser.js"){}#-->
    new Vue({
        el: "#app",
@@ -6,7 +6,7 @@ layout("/layouts/platform.html"){
    <activity-culture-audit-activity :activity_type="activityType"></activity-culture-audit-activity>
 </div>

-<script>
+<script nonce="${cspNonce!}">
    <!--#include("../../common/auditActivity.js"){}#-->
    new Vue({
        el: "#app",
@@ -6,7 +6,7 @@ layout("/layouts/platform.html"){
    <activity-culture-info-manage :activity_type="activityType"></activity-culture-info-manage>
 </div>

-<script>
+<script nonce="${cspNonce!}">
    <!--#include("../../common/infoMange.js"){}#-->
    new Vue({
        el: "#app",
@@ -8,7 +8,7 @@ layout("/layouts/platform.html"){
    </guava>
 </div>

-<script>
+<script nonce="${cspNonce!}">
    <!--#include("../../common/userStatistics.js"){}#-->
    new Vue({
        el: "#app",
@@ -157,7 +157,7 @@
 	<snaker-flow-task-form-action @task-action="handleTaskAction" @save-draft="handleSaveDraft"></snaker-flow-task-form-action>
 </div>

-<script>
+<script nonce="${cspNonce!}">
 	new Vue({
 		el: '#activity_declare_apply',
 		store,
@@ -195,7 +195,7 @@ layout("/layouts/platform.html"){
    </el-card>
 </div>

-<script>
+<script nonce="${cspNonce!}">
    new Vue({
        el: "#app",
        mixins: [initTableMixins],
@@ -62,7 +62,7 @@
 	</template>
 </div>

-<script>
+<script nonce="${cspNonce!}">
 	new Vue({
 		el: "#activity_declare_view",
 		dicts: ["PROCESS_TASK_SUBMIT_TYPE"],
@@ -7,7 +7,7 @@
 	<snaker-flow-task-form-action @task-action="handleTaskAction" @cancel="handleCancel"></snaker-flow-task-form-action>
 </div>

-<script>
+<script nonce="${cspNonce!}">
 	new Vue({
 		el: "#activity_declare_branch_union_approval_form",
 		data() {
@@ -115,7 +115,7 @@ layout("/layouts/platform.html"){

 </div>

-<script>
+<script nonce="${cspNonce!}">
 	<!--#include("../common/info.js"){}#-->

 	new Vue({
@@ -7,7 +7,7 @@
 	<snaker-flow-task-form-action @task-action="handleTaskAction" @cancel="handleCancel"></snaker-flow-task-form-action>
 </div>

-<script>
+<script nonce="${cspNonce!}">
 	new Vue({
 		el: "#activity_declare_club_principal_approval_form",
 		data() {
@@ -102,7 +102,7 @@ layout("/layouts/platform.html"){

 </div>

-<script>
+<script nonce="${cspNonce!}">
 	<!--#include("../common/info.js"){}#-->

 	new Vue({
@@ -108,7 +108,7 @@ layout("/layouts/platform.html"){

 </div>

-<script>
+<script nonce="${cspNonce!}">
 	<!--#include("../common/info.js"){}#-->

 	new Vue({
@@ -7,7 +7,7 @@
 	<snaker-flow-task-form-action @task-action="handleTaskAction" @cancel="handleCancel"></snaker-flow-task-form-action>
 </div>

-<script>
+<script nonce="${cspNonce!}">
 	new Vue({
 		el: "#activity_declare_school_principal_approval_form",
 		data() {
@@ -115,7 +115,7 @@ layout("/layouts/platform.html"){

 </div>

-<script>
+<script nonce="${cspNonce!}">
 	<!--#include("../common/info.js"){}#-->

 	new Vue({
@@ -7,7 +7,7 @@
 	<snaker-flow-task-form-action @task-action="handleTaskAction" @cancel="handleCancel"></snaker-flow-task-form-action>
 </div>

-<script>
+<script nonce="${cspNonce!}">
 	new Vue({
 		el: "#activity_declare_school_union_approval_form",
 		data() {
@@ -115,7 +115,7 @@ layout("/layouts/platform.html"){

 </div>

-<script>
+<script nonce="${cspNonce!}">
 	<!--#include("../common/info.js"){}#-->

 	new Vue({
--- a/Show More
+++ b/Show More