From 7361721ec0408d0de737c6821a6af887b3206509 Mon Sep 17 00:00:00 2001
From: David Taylor <david@taylorhq.com>
Date: Wed, 6 Mar 2024 16:45:55 +0000
Subject: [PATCH] DEV: Update for strict-dynamic CSP (#194)

---
 plugin.rb | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/plugin.rb b/plugin.rb
index e764156..023b969 100644
--- a/plugin.rb
+++ b/plugin.rb
@@ -18,8 +18,8 @@ register_asset "stylesheets/common/campaign.scss"
 register_asset "stylesheets/mobile/main.scss"
 register_svg_icon "far-credit-card" if respond_to?(:register_svg_icon)
 
-register_html_builder("server:before-head-close") do
-  "<script src='https://js.stripe.com/v3/'></script>"
+register_html_builder("server:before-head-close") do |controller|
+  "<script src='https://js.stripe.com/v3/' nonce='#{controller.helpers.csp_nonce_placeholder}'></script>"
 end
 
 extend_content_security_policy(script_src: %w[https://js.stripe.com/v3/ https://hooks.stripe.com])