From 065da9bc6e1a7fe0b71db87813c97f614b50bed9 Mon Sep 17 00:00:00 2001
From: Leif Ringstad <leif@symbolia.com>
Date: Thu, 19 Jan 2017 16:11:49 +0100
Subject: [PATCH] Add nonce option for secure headers

---
 skel/livereload.html.erb | 30 +++++++++++++++++++-----------
 1 file changed, 19 insertions(+), 11 deletions(-)

diff --git a/skel/livereload.html.erb b/skel/livereload.html.erb
index 6721c43..434e3d3 100644
--- a/skel/livereload.html.erb
+++ b/skel/livereload.html.erb
@@ -1,15 +1,23 @@
 <% if with_swf? %>
-  <script type="text/javascript">
-    WEB_SOCKET_SWF_LOCATION = "/__rack/WebSocketMain.swf";
-    <% if force_swf? %>
-      WEB_SOCKET_FORCE_FLASH = true;
-    <% end %>
-  </script>
-  <script type="text/javascript" src="<%= app_root %>/__rack/swfobject.js"></script>
-  <script type="text/javascript" src="<%= app_root %>/__rack/web_socket.js"></script>
+  <% if defined?(SecureHeaders) %>
+    <script type="text/javascript" nonce="<%= content_security_policy_script_nonce %>">
+  <% else %>
+    <script type="text/javascript">
+  <% end %>
+      WEB_SOCKET_SWF_LOCATION = "/__rack/WebSocketMain.swf";
+      <% if force_swf? %>
+        WEB_SOCKET_FORCE_FLASH = true;
+      <% end %>
+    </script>
+    <script type="text/javascript" src="<%= app_root %>/__rack/swfobject.js"></script>
+    <script type="text/javascript" src="<%= app_root %>/__rack/web_socket.js"></script>
 <% end %>
-<script type="text/javascript">
-  RACK_LIVERELOAD_PORT = <%= @options[:live_reload_port] %>;
-</script>
+<% if defined?(SecureHeaders) %>
+  <script type="text/javascript" nonce="<%= content_security_policy_script_nonce %>">
+<% else %>
+  <script type="text/javascript">
+<% end %>
+    RACK_LIVERELOAD_PORT = <%= @options[:live_reload_port] %>;
+  </script>
 <script type="text/javascript" src="<%= livereload_source %>"></script>