commit

src/main/resources/views/layouts/v4/baseLayout.html

@@ -100,7 +100,7 @@
 
         <script src="https://map.qq.com/api/gljs?v=2.exp&key=MLLBZ-GQECI-ASXG7-5GNOZ-XW2OF-H5BVH"></script>
 
-        <script>
+        <script nonce="${cspNonce!}">
             // 在加载 lodash 后、使用前插入
             const originalDefaultsDeep = window._.defaultsDeep;
             window._.defaultsDeep = function(...args) {
@@ -125,7 +125,7 @@
             }
         </script>
 
-        <script type="text/javascript">
+        <script nonce="${cspNonce!}" type="text/javascript">
             Vue.config.devtools = false
             ELEMENT.locale(ELEMENT.lang["${lang,escape}"])
             ELEMENT.Dialog.props.closeOnClickModal.default = false
@@ -142,12 +142,12 @@
         </script>
 
         <!--广播频道-->
-        <script type="text/javascript">
+        <script nonce="${cspNonce!}" type="text/javascript">
             window.GlobalBroadcastChannel = new BroadcastChannel("zhgh-global-channel")
         </script>
 
         <!--ws-->
-        <script type="text/javascript">
+        <script nonce="${cspNonce!}" type="text/javascript">
             class WebSocketPubSub {
                 constructor() {
                     this.ws = null
@@ -297,7 +297,7 @@
         </script>
 
         <!--vuex-->
-        <script type="text/javascript">
+        <script nonce="${cspNonce!}" type="text/javascript">
             window.store = new Vuex.Store({
                 plugins: [
                     createPersistedState({
@@ -337,13 +337,13 @@
         </script>
 
         <!--beetl全局变量方法-->
-        <script type="text/javascript">
+        <script nonce="${cspNonce!}" type="text/javascript">
             const base = "${base!}"
             const APP_DOMAIN = "${AppDomain!}"
         </script>
 
         <!--vue挂载-->
-        <script type="text/javascript">
+        <script nonce="${cspNonce!}" type="text/javascript">
             Vue.prototype.$moment = moment
             Vue.prototype.$businessTool = businessTool
             Vue.prototype.$commonUtil = commonUtil
@@ -354,7 +354,7 @@
         </script>
 
         <!--vue全局组件-->
-        <script>
+        <script nonce="${cspNonce!}">
             Vue.component(VueQrcode.name, VueQrcode)
             Vue.component("guava", httpVueLoader("/components/plugins/Guava.vue?v=" + new Date().getTime()))
             Vue.component("enum-tag", httpVueLoader("/components/plugins/sysEnum/EnumTag.vue?v=" + new Date().getTime()))
@@ -698,7 +698,7 @@
         </footer>
 
 
-        <script>
+        <script nonce="${cspNonce!}">
             // 处理导航项的active状态
             $(document).ready(function () {
                 // 控制页脚显示的函数