add nonce for css

This commit is contained in:
mappu 2017-12-10 13:44:26 +13:00
parent 9ebe6ca2fb
commit 86cc1cbb2e

View File

@ -199,7 +199,7 @@ func (this *ArchiveState) renderTemplateHead(w http.ResponseWriter) {
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
<title>` + html.EscapeString(title) + `</title>
<link rel="stylesheet" type="text/css" href="/style.css">
<link rel="stylesheet" type="text/css" href="/style.css?nonce=` + fmt.Sprintf("%d", this.svr.startup.Unix()) + `">
</head>
<body>
<div class="layout-top nav">