Merge pull request #56 from humhub/fix/53-script-qr-code

Fix initialize of inline script of QR code
humhub · Jun 8, 2023 · 04ee8c5 · 04ee8c5
2 parents e2c6f45 + fe27207
commit 04ee8c5
Show file tree

Hide file tree

Showing 3 changed files with 8 additions and 3 deletions.
diff --git a/docs/CHANGELOG.md b/docs/CHANGELOG.md
@@ -1,6 +1,10 @@
 Changelog
 =========
 
+1.1.3 (June 8, 2023)
+--------------------
+- Fix #53: Fix initialize of inline script of QR code
+
 1.1.2 (May 17, 2023)
 -------------------
 - Fix #55: Don't send a verification code when trusted IP address

diff --git a/module.json b/module.json
@@ -12,7 +12,7 @@
     "resources/screen2.png",
     "resources/screen3.png"
   ],
-  "version": "1.1.2",
+  "version": "1.1.3",
   "humhub": {
     "minVersion": "1.11"
   }

diff --git a/views/config/userGoogleAuthenticatorCode.php b/views/config/userGoogleAuthenticatorCode.php
@@ -5,6 +5,7 @@
  * @license https://www.humhub.com/licences
  */
 
+use humhub\libs\Html;
 use humhub\modules\twofa\helpers\TwofaHelper;
 
 /* @var $qrCodeText string */
@@ -39,7 +40,7 @@
     </div>
 </div>
 
-<script>
+<script <?= Html::nonce() ?>>
 $(document).ready(function(){
     if ($('#twofa-google-auth-qrcode').html() === '') {
         new QRCode('twofa-google-auth-qrcode', {
@@ -54,4 +55,4 @@
     $('input[name="GoogleAuthenticatorUserSettings[changeSecretCode]"]').val(1);
 <?php endif; ?>
 })
-</script>
+</script>