|
6 | 6 |
|
7 | 7 | /**
|
8 | 8 | * @var \Magento\Framework\View\Helper\SecureHtmlRenderer $secureRenderer
|
| 9 | + * @var \Magento\Framework\Escaper $escaper |
9 | 10 | */
|
10 | 11 | ?>
|
11 | 12 |
|
|
22 | 23 | <?php
|
23 | 24 | /** @var \Magento\AdminAnalytics\ViewModel\Metadata $metadata */
|
24 | 25 | $metadata = $block->getMetadata();
|
| 26 | +$nonce = $escaper->escapeJs($metadata->getNonce()); |
25 | 27 | $scriptString = '
|
26 | 28 | var adminAnalyticsMetadata = {
|
27 |
| - "secure_base_url": "' . $block->escapeJs($metadata->getSecureBaseUrlForScope()) . '", |
28 |
| - "version": "' . $block->escapeJs($metadata->getMagentoVersion()) . '", |
29 |
| - "product_edition": "' . $block->escapeJs($metadata->getProductEdition()) . '", |
30 |
| - "user": "' . $block->escapeJs($metadata->getCurrentUser()) . '", |
31 |
| - "mode": "' . $block->escapeJs($metadata->getMode()) . '", |
32 |
| - "store_name_default": "' . $block->escapeJs($metadata->getStoreNameForScope()) . '", |
33 |
| - "admin_user_created": "' . $block->escapeJs($metadata->getCurrentUserCreatedDate()) . '", |
34 |
| - "admin_user_logdate": "' . $block->escapeJs($metadata->getCurrentUserLogDate()) . '", |
35 |
| - "admin_user_role_name": "' . $block->escapeJs($metadata->getCurrentUserRoleName()) . '" |
| 29 | + "secure_base_url": "' . $escaper->escapeJs($metadata->getSecureBaseUrlForScope()) . '", |
| 30 | + "version": "' . $escaper->escapeJs($metadata->getMagentoVersion()) . '", |
| 31 | + "product_edition": "' . $escaper->escapeJs($metadata->getProductEdition()) . '", |
| 32 | + "user": "' . $escaper->escapeJs($metadata->getCurrentUser()) . '", |
| 33 | + "mode": "' . $escaper->escapeJs($metadata->getMode()) . '", |
| 34 | + "store_name_default": "' . $escaper->escapeJs($metadata->getStoreNameForScope()) . '", |
| 35 | + "admin_user_created": "' . $escaper->escapeJs($metadata->getCurrentUserCreatedDate()) . '", |
| 36 | + "admin_user_logdate": "' . $escaper->escapeJs($metadata->getCurrentUserLogDate()) . '", |
| 37 | + "admin_user_role_name": "' . $escaper->escapeJs($metadata->getCurrentUserRoleName()) . '" |
36 | 38 | };
|
| 39 | +
|
| 40 | + var digitalData = { |
| 41 | + "nonce": "' . $nonce . '" |
| 42 | + }; |
| 43 | +
|
| 44 | + var cspNonce = "' . $nonce . '"; |
37 | 45 | ';
|
38 | 46 | ?>
|
39 | 47 | <?= /* @noEscape */ $secureRenderer->renderTag('script', [], $scriptString, false); ?>
|
0 commit comments