Added Nonce to inline script

Safari blocks inline script
ideal-postcodes · Jun 17, 2024 · 0ce47ee · 0ce47ee
1 parent 2a61e34
commit 0ce47ee
Showing 1 changed file with 16 additions and 13 deletions.
diff --git a/view/frontend/templates/store.phtml b/view/frontend/templates/store.phtml
@@ -1,18 +1,19 @@
 <?php
 $helper = $this->helper('Idealpostcodes\Ukaddresssearch\Helper\Data'); ?>
 
-<script type="text/javascript" name="Ideal_Postcodes">
-document.addEventListener('DOMContentLoaded', function() {
-  var apiKey = "<?php echo $helper->getConfig('api_key'); ?>";
-  var postcodeLookup = <?php echo $helper->getConfig('postcodeLookup'); ?>;
-  var autocomplete = <?php echo $helper->getConfig('addressAutocomplete'); ?>;
-  var populateOrganisation = <?php echo $helper->getConfig('populateOrganisation'); ?>;
-  var hoistCountry = <?php echo $helper->getConfig('hoistCountryField'); ?>;
-  var populateCounty = <?php echo $helper->getConfig('requireCounty'); ?>;
-  var autocompleteOverride = <?php echo $helper->getConfig('autocompleteOverride'); ?>;
-  var postcodeLookupOverride = <?php echo $helper->getConfig('postcodeLookupOverride'); ?>;
-  var enabled = <?php echo $helper->getConfig('enabled'); ?>;
-  var customFields = <?php echo trim(preg_replace('/\r|\n/', '', $helper->getConfig('customFields'))); ?>;
+<?php
+$script = '
+document.addEventListener(\'DOMContentLoaded\', function() {
+  var apiKey = "' . $helper->getConfig('api_key') . '";
+  var postcodeLookup = ' . $helper->getConfig('postcodeLookup') . ';
+  var autocomplete = ' . $helper->getConfig('addressAutocomplete') . ';
+  var populateOrganisation = ' . $helper->getConfig('populateOrganisation') . ';
+  var hoistCountry = ' . $helper->getConfig('hoistCountryField') . ';
+  var populateCounty = ' . $helper->getConfig('requireCounty') . ';
+  var autocompleteOverride = ' . $helper->getConfig('autocompleteOverride') . ';
+  var postcodeLookupOverride = ' . $helper->getConfig('postcodeLookupOverride') . ';
+  var enabled = ' . $helper->getConfig('enabled') . ';
+  var customFields = ' . trim(preg_replace("/\r|\n/", "", $helper->getConfig('customFields'))) . ';
   // Exit early if disabled
   if (enabled === false) return;
   window.idpcConfig = {
@@ -28,4 +29,6 @@ document.addEventListener('DOMContentLoaded', function() {
   };
   window.idpcStart();
 });
-</script>
+';
+?>
+<?= $secureRenderer->renderTag('script', [], $script, false); ?>