fix: add missing nonce to popstate script (#4468)

QwikDev · Jun 12, 2023 · 54b22f5 · 54b22f5
1 parent eed8a43
commit 54b22f5
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/packages/qwik-city/runtime/src/router-outlet-component.tsx b/packages/qwik-city/runtime/src/router-outlet-component.tsx
@@ -7,6 +7,7 @@ import {
   _IMMUTABLE,
   _jsxBranch,
   _jsxQ,
+  useServerData,
 } from '@builder.io/qwik';
 
 import { ContentInternalContext } from './contexts';
@@ -18,6 +19,7 @@ import popStateScript from './init-popstate.txt?raw';
 export const RouterOutlet = component$(() => {
   _jsxBranch();
 
+  const nonce = useServerData<string | undefined>('nonce');
   const { value } = useContext(ContentInternalContext);
   if (value && value.length > 0) {
     const contentsLen = value.length;
@@ -30,7 +32,7 @@ export const RouterOutlet = component$(() => {
     return (
       <>
         {cmp}
-        <script dangerouslySetInnerHTML={popStateScript}></script>
+        <script dangerouslySetInnerHTML={popStateScript} nonce={nonce}></script>
       </>
     );
   }