Vulnerability related to nonces in scripts used with the Sec-Header_XH header

[olape-git]

Add to index.php

// for security headers
$hifb_nonce = '';
if (function_exists('sh_cspHeaderNonce')) {
    $hifb_nonce = ' nonce="' . sh_cspHeaderNonce() . '"';
}

hi_fancybox/index.php

Line 106 in 288ff66

'<script type="text/javascript">

to:

<script' . $hifb_nonce . '>

Same here:

hi_fancybox/index.php

Line 52 in 288ff66

'<script type="text/javascript">