From d5eab46b3e9232bc48d5e8c3d02104c7dbf5ffb4 Mon Sep 17 00:00:00 2001 From: David Cook Date: Wed, 4 Feb 2026 00:06:43 +0000 Subject: [PATCH] Bug 38365: Add CSP nonces to all inline style tags Signed-off-by: David Cook --- koha-tmpl/intranet-tmpl/prog/en/includes/doc-head-close.inc | 4 ++-- .../includes/ill/backends/Standard/shared/custom_fields.inc | 2 +- .../prog/en/includes/installer-doc-head-close.inc | 2 +- koha-tmpl/intranet-tmpl/prog/en/modules/about.tt | 2 +- .../intranet-tmpl/prog/en/modules/acqui/addorderiso2709.tt | 2 +- koha-tmpl/intranet-tmpl/prog/en/modules/acqui/basket.tt | 2 +- .../intranet-tmpl/prog/en/modules/acqui/booksellers.tt | 2 +- .../intranet-tmpl/prog/en/modules/acqui/duplicate_orders.tt | 2 +- .../intranet-tmpl/prog/en/modules/acqui/neworderempty.tt | 2 +- .../intranet-tmpl/prog/en/modules/acqui/orderreceive.tt | 2 +- koha-tmpl/intranet-tmpl/prog/en/modules/acqui/parcel.tt | 2 +- .../intranet-tmpl/prog/en/modules/acqui/z3950_search.tt | 2 +- koha-tmpl/intranet-tmpl/prog/en/modules/admin/aqplan.tt | 2 +- .../prog/en/modules/admin/authorised_values.tt | 2 +- .../prog/en/modules/admin/branch_transfer_limits.tt | 2 +- koha-tmpl/intranet-tmpl/prog/en/modules/admin/branches.tt | 4 ++-- koha-tmpl/intranet-tmpl/prog/en/modules/admin/categories.tt | 2 +- .../intranet-tmpl/prog/en/modules/admin/classsources.tt | 2 +- .../intranet-tmpl/prog/en/modules/admin/columns_settings.tt | 2 +- .../intranet-tmpl/prog/en/modules/admin/curbside_pickup.tt | 2 +- .../prog/en/modules/admin/item_circulation_alerts.tt | 2 +- koha-tmpl/intranet-tmpl/prog/en/modules/admin/itemtypes.tt | 2 +- .../intranet-tmpl/prog/en/modules/admin/localization.tt | 2 +- .../prog/en/modules/admin/marc-overlay-rules.tt | 2 +- .../prog/en/modules/admin/marc_subfields_structure.tt | 2 +- .../intranet-tmpl/prog/en/modules/admin/matching-rules.tt | 2 +- .../en/modules/admin/searchengine/elasticsearch/mappings.tt | 2 +- .../intranet-tmpl/prog/en/modules/admin/transfer_limits.tt | 2 +- .../prog/en/modules/admin/transport-cost-matrix.tt | 2 +- .../prog/en/modules/authorities/authorities.tt | 2 +- .../intranet-tmpl/prog/en/modules/authorities/merge.tt | 2 +- .../prog/en/modules/authorities/searchresultlist-auth.tt | 2 +- .../prog/en/modules/authorities/searchresultlist.tt | 2 +- .../intranet-tmpl/prog/en/modules/batch/print-notices.tt | 2 +- .../intranet-tmpl/prog/en/modules/catalogue/imageviewer.tt | 2 +- .../intranet-tmpl/prog/en/modules/catalogue/moredetail.tt | 2 +- .../intranet-tmpl/prog/en/modules/catalogue/showelastic.tt | 2 +- .../intranet-tmpl/prog/en/modules/cataloguing/additem.tt | 2 +- .../intranet-tmpl/prog/en/modules/cataloguing/merge.tt | 2 +- .../intranet-tmpl/prog/en/modules/circ/article-requests.tt | 2 +- .../intranet-tmpl/prog/en/modules/circ/branchtransfers.tt | 2 +- koha-tmpl/intranet-tmpl/prog/en/modules/circ/circulation.tt | 2 +- .../intranet-tmpl/prog/en/modules/circ/curbside_pickups.tt | 2 +- koha-tmpl/intranet-tmpl/prog/en/modules/circ/overdue.tt | 2 +- koha-tmpl/intranet-tmpl/prog/en/modules/circ/printslip.tt | 2 +- .../intranet-tmpl/prog/en/modules/circ/reserveratios.tt | 2 +- koha-tmpl/intranet-tmpl/prog/en/modules/circ/set-library.tt | 2 +- .../intranet-tmpl/prog/en/modules/circ/view_holdsqueue.tt | 2 +- .../intranet-tmpl/prog/en/modules/circ/waitingreserves.tt | 2 +- .../prog/en/modules/clubs/templates-add-modify.tt | 2 +- .../prog/en/modules/course_reserves/course-details.tt | 2 +- .../intranet-tmpl/prog/en/modules/course_reserves/course.tt | 2 +- .../intranet-tmpl/prog/en/modules/labels/barcode-print.tt | 2 +- .../intranet-tmpl/prog/en/modules/labels/label-print.tt | 2 +- .../prog/en/modules/labels/spinelabel-print.tt | 4 ++-- .../intranet-tmpl/prog/en/modules/members/merge-patrons.tt | 2 +- .../prog/en/modules/members/moremember-print.tt | 2 +- .../intranet-tmpl/prog/en/modules/members/printfeercpt.tt | 2 +- .../intranet-tmpl/prog/en/modules/members/printinvoice.tt | 2 +- .../intranet-tmpl/prog/en/modules/members/printnotice.tt | 2 +- .../intranet-tmpl/prog/en/modules/patron_lists/list.tt | 2 +- koha-tmpl/intranet-tmpl/prog/en/modules/pos/printreceipt.tt | 2 +- .../prog/en/modules/reports/borrowers_stats.tt | 2 +- .../intranet-tmpl/prog/en/modules/reports/catalogue_out.tt | 2 +- .../intranet-tmpl/prog/en/modules/reports/dictionary.tt | 2 +- .../prog/en/modules/reports/guided_reports_start.tt | 2 +- .../intranet-tmpl/prog/en/modules/reports/issues_stats.tt | 2 +- .../intranet-tmpl/prog/en/modules/reports/reserves_stats.tt | 2 +- .../intranet-tmpl/prog/en/modules/reports/serials_stats.tt | 2 +- koha-tmpl/intranet-tmpl/prog/en/modules/reserve/request.tt | 2 +- .../prog/en/modules/serials/routing-preview-slip.tt | 2 +- .../intranet-tmpl/prog/en/modules/serials/serials-edit.tt | 2 +- .../intranet-tmpl/prog/en/modules/serials/serials-search.tt | 2 +- .../prog/en/modules/serials/subscription-add.tt | 2 +- .../intranet-tmpl/prog/en/modules/suggestion/suggestion.tt | 2 +- koha-tmpl/intranet-tmpl/prog/en/modules/tags/list.tt | 2 +- koha-tmpl/intranet-tmpl/prog/en/modules/tags/review.tt | 2 +- .../prog/en/modules/tools/additional-contents.tt | 4 ++-- .../intranet-tmpl/prog/en/modules/tools/batchMod-del.tt | 2 +- .../intranet-tmpl/prog/en/modules/tools/batchMod-edit.tt | 2 +- koha-tmpl/intranet-tmpl/prog/en/modules/tools/export.tt | 2 +- .../intranet-tmpl/prog/en/modules/tools/import_borrowers.tt | 2 +- koha-tmpl/intranet-tmpl/prog/en/modules/tools/inventory.tt | 2 +- koha-tmpl/intranet-tmpl/prog/en/modules/tools/letter.tt | 2 +- .../prog/en/modules/tools/manage-marc-import.tt | 2 +- .../prog/en/modules/tools/marc_modification_templates.tt | 2 +- .../intranet-tmpl/prog/en/modules/tools/showdiffmarc.tt | 2 +- .../prog/en/modules/tools/stage-marc-import.tt | 2 +- .../intranet-tmpl/prog/en/modules/tools/stockrotation.tt | 2 +- .../intranet-tmpl/prog/en/modules/tools/upload-images.tt | 2 +- koha-tmpl/intranet-tmpl/prog/en/modules/tools/upload.tt | 2 +- koha-tmpl/intranet-tmpl/prog/en/modules/tools/viewlog.tt | 2 +- .../prog/en/modules/virtualshelves/addbybiblionumber.tt | 2 +- .../intranet-tmpl/prog/en/modules/virtualshelves/shelves.tt | 2 +- .../opac-tmpl/bootstrap/en/includes/doc-head-close.inc | 6 +++--- .../includes/ill/backends/Standard/shared/custom_fields.inc | 2 +- koha-tmpl/opac-tmpl/bootstrap/en/modules/maintenance.tt | 2 +- .../bootstrap/en/modules/opac-addbybiblionumber.tt | 2 +- koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-advsearch.tt | 2 +- koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-basket.tt | 2 +- .../opac-tmpl/bootstrap/en/modules/opac-curbside-pickups.tt | 2 +- koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-detail.tt | 2 +- .../bootstrap/en/modules/opac-full-serial-issues.tt | 2 +- .../opac-tmpl/bootstrap/en/modules/opac-holdshistory.tt | 2 +- koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-idref.tt | 2 +- .../opac-tmpl/bootstrap/en/modules/opac-imageviewer.tt | 2 +- koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-library.tt | 2 +- .../opac-tmpl/bootstrap/en/modules/opac-serial-issues.tt | 2 +- koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-tags.tt | 2 +- koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-topissues.tt | 2 +- koha-tmpl/opac-tmpl/bootstrap/en/modules/sci/sci-main.tt | 6 +++--- koha-tmpl/opac-tmpl/bootstrap/en/modules/sco/help.tt | 6 +++--- koha-tmpl/opac-tmpl/bootstrap/en/modules/sco/sco-main.tt | 6 +++--- 113 files changed, 125 insertions(+), 125 deletions(-) diff --git a/koha-tmpl/intranet-tmpl/prog/en/includes/doc-head-close.inc b/koha-tmpl/intranet-tmpl/prog/en/includes/doc-head-close.inc index 7dae4dd2974..26700d95be1 100644 --- a/koha-tmpl/intranet-tmpl/prog/en/includes/doc-head-close.inc +++ b/koha-tmpl/intranet-tmpl/prog/en/includes/doc-head-close.inc @@ -10,7 +10,7 @@ [% IF logged_in_user %][% END %] [%# Prevent XFS attacks -%] [% UNLESS popup %] - + [% END %] diff --git a/koha-tmpl/intranet-tmpl/prog/en/includes/ill/backends/Standard/shared/custom_fields.inc b/koha-tmpl/intranet-tmpl/prog/en/includes/ill/backends/Standard/shared/custom_fields.inc index e49b3832632..bfdc09d97d7 100644 --- a/koha-tmpl/intranet-tmpl/prog/en/includes/ill/backends/Standard/shared/custom_fields.inc +++ b/koha-tmpl/intranet-tmpl/prog/en/includes/ill/backends/Standard/shared/custom_fields.inc @@ -25,7 +25,7 @@ - + [% END %] [% END %] diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/reserveratios.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/circ/reserveratios.tt index d31149225d2..b1d92760c51 100644 --- a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/reserveratios.tt +++ b/koha-tmpl/intranet-tmpl/prog/en/modules/circ/reserveratios.tt @@ -16,7 +16,7 @@ [% END %] [% INCLUDE 'doc-head-close.inc' %] - -[% IF ( IntranetUserCSS ) %][% END %] +[% IF ( IntranetUserCSS ) %][% END %] diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/members/merge-patrons.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/members/merge-patrons.tt index d7943b5b6fd..43f89a76128 100644 --- a/koha-tmpl/intranet-tmpl/prog/en/modules/members/merge-patrons.tt +++ b/koha-tmpl/intranet-tmpl/prog/en/modules/members/merge-patrons.tt @@ -15,7 +15,7 @@ > [% INCLUDE 'doc-head-close.inc' %] [% FILTER collapse %] - [% END %] +[% IF style %][% END %] [% INCLUDE 'blocking_errors.inc' %] diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/members/printinvoice.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/members/printinvoice.tt index 759a360acd0..a1bfa292189 100644 --- a/koha-tmpl/intranet-tmpl/prog/en/modules/members/printinvoice.tt +++ b/koha-tmpl/intranet-tmpl/prog/en/modules/members/printinvoice.tt @@ -17,7 +17,7 @@ [% Asset.css("css/printreceiptinvoice.css") | $raw %] -[% IF style %][% END %] +[% IF style %][% END %] [% INCLUDE 'blocking_errors.inc' %] diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/members/printnotice.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/members/printnotice.tt index 95bb4634514..edf0615bb5e 100644 --- a/koha-tmpl/intranet-tmpl/prog/en/modules/members/printnotice.tt +++ b/koha-tmpl/intranet-tmpl/prog/en/modules/members/printnotice.tt @@ -20,7 +20,7 @@ [% END %] -[% IF style %][% END %] +[% IF style %][% END %] diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/patron_lists/list.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/patron_lists/list.tt index a2087f913be..277afdcfaba 100644 --- a/koha-tmpl/intranet-tmpl/prog/en/modules/patron_lists/list.tt +++ b/koha-tmpl/intranet-tmpl/prog/en/modules/patron_lists/list.tt @@ -14,7 +14,7 @@ > [% INCLUDE 'doc-head-close.inc' %] -[% END %] +[% IF style %][% END %] [% INCLUDE 'blocking_errors.inc' %] diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/reports/borrowers_stats.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/reports/borrowers_stats.tt index 1c9f4f4e973..1192c6f439b 100644 --- a/koha-tmpl/intranet-tmpl/prog/en/modules/reports/borrowers_stats.tt +++ b/koha-tmpl/intranet-tmpl/prog/en/modules/reports/borrowers_stats.tt @@ -21,7 +21,7 @@ > [% INCLUDE 'doc-head-close.inc' %] - + [% END %] [% IF Branches.GetBranchSpecificCSS( Branches.GetLoggedInBranchcode() || default_branch) %] - @@ -62,7 +62,7 @@ [% SET SCOUserCSS = Koha.Preference('SCOUserCSS') %] [% IF SCOUserCSS %] - + [% END %] [% END %] diff --git a/koha-tmpl/opac-tmpl/bootstrap/en/includes/ill/backends/Standard/shared/custom_fields.inc b/koha-tmpl/opac-tmpl/bootstrap/en/includes/ill/backends/Standard/shared/custom_fields.inc index e49b3832632..bfdc09d97d7 100644 --- a/koha-tmpl/opac-tmpl/bootstrap/en/includes/ill/backends/Standard/shared/custom_fields.inc +++ b/koha-tmpl/opac-tmpl/bootstrap/en/includes/ill/backends/Standard/shared/custom_fields.inc @@ -25,7 +25,7 @@ - + [% END %] [% IF Branches.GetBranchSpecificCSS( Branches.GetLoggedInBranchcode() || default_branch) %] - [% END %] [% IF ( Koha.Preference('SelfCheckInUserCSS') ) %] - + [% END %]