fix: making XSS adjustments

katspaugh · Sep 6, 2024 · 663446f · 663446f
1 parent d875275
commit 663446f
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/src/renderer.ts b/src/renderer.ts
@@ -169,10 +169,10 @@ class Renderer extends EventEmitter<RendererEvents> {
     const div = document.createElement('div')
     const shadow = div.attachShadow({ mode: 'open' })
 
-    const nonce = this.options.nonce;
+    const cspNonce = this.options.cspNonce && typeof this.options.cspNonce === 'string' ? this.options.cspNonce.replace(/"/g, '') : '';
 
     shadow.innerHTML = `
-      <style ${nonce ? `nonce="${nonce}"` : ''}>
+      <style${cspNonce ? ` nonce="${cspNonce}"` : ''}>
         :host {
           user-select: none;
           min-width: 1px;

diff --git a/src/wavesurfer.ts b/src/wavesurfer.ts
@@ -77,7 +77,7 @@ export type WaveSurferOptions = {
   /** Playback "backend" to use, defaults to MediaElement */
   backend?: 'WebAudio' | 'MediaElement'
   /** Nonce for CSP if necessary */
-  nonce?: string
+  cspNonce?: string
 }
 
 const defaultOptions = {