From: Dylan William Hardison <dylan@hardison.net>
Date: Wed, 10 Apr 2019 19:01:58 +0000 (-0400)
Subject: no bug - force the creation of the csp nonce value if it is used
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=69320a15eec14be999d6e5ae1fb3bcea31be0df9;p=thirdparty%2Fbugzilla.git

no bug - force the creation of the csp nonce value if it is used
---

diff --git a/Bugzilla/App/Plugin/Glue.pm b/Bugzilla/App/Plugin/Glue.pm
index 3f6dc2ad6..45c9721c7 100644
--- a/Bugzilla/App/Plugin/Glue.pm
+++ b/Bugzilla/App/Plugin/Glue.pm
@@ -186,6 +186,8 @@ sub register {
         $stash->{Bugzilla_csp} = Bugzilla::CGI::ContentSecurityPolicy->new(%params);
       }
 
+      # force the creation of the value, and thus the nonce (if it is used)
+      $stash->{Bugzilla_csp}->value;
       return $stash->{Bugzilla_csp};
     }
   );