- Implemented CSP (Content Security Policy)

sql/postgresql/intranet-dynfield-create.sql

@@ -1757,6 +1757,37 @@ select im_dynfield_widget__new (
 );
 
 
+-- Add javascript calendar buton on date widget
+UPDATE im_dynfield_widgets 
+SET parameters = '{format "YYYY-MM-DD HH24:MI"} {after_html {
+<input type="button" id=''${attribute_name}_calendar'' style="height:20px; width:20px; background: url(''/resources/acs-templating/calendar.gif'');"> 
+<script type="text/javascript" nonce="[im_csp_nonce]">
+window.addEventListener(''load'', function() { 
+     document.getElementById(''${attribute_name}_calendar'').addEventListener(''click'', function() { showCalendarWithDateWidget(''${attribute_name}'', ''y-m-d''); });
+});
+</script>
+}}' 
+WHERE widget_name = 'timestamp';
+
+
+
+
+
+-- Add javascript calendar buton on date widget
+UPDATE im_dynfield_widgets 
+SET parameters = '{format "YYYY-MM-DD"} {after_html {
+<input type="button" id=''${attribute_name}_calendar'' style="height:20px; width:20px; background: url(''/resources/acs-templating/calendar.gif'');"> 
+<script type="text/javascript" nonce="[im_csp_nonce]">
+window.addEventListener(''load'', function() { 
+     document.getElementById(''${attribute_name}_calendar'').addEventListener(''click'', function() { showCalendarWithDateWidget(''${attribute_name}'', ''y-m-d''); });
+});
+</script>
+}}' 
+WHERE widget_name = 'date';
+
+
+
+
 select im_dynfield_widget__new (
 	null,					-- widget_id
 	'im_dynfield_widget',			-- object_type
@@ -2841,13 +2872,6 @@ drop function inline_0();
 
 
 
--- Add javascript calendar buton on date widget
-UPDATE im_dynfield_widgets 
-SET parameters = '{format "YYYY-MM-DD"} {after_html {<input type="button" style="height:20px; width:20px; background: url(''/resources/acs-templating/calendar.gif'');" onclick ="return showCalendarWithDateWidget(''$attribute_name'', ''y-m-d'');" ></b>}}' 
-WHERE widget_name = 'date';
-
-
-
 update im_dynfield_widgets
 set pretty_name = 'Translation Languages',
 	pretty_plural = 'Translation Languages'

sql/postgresql/upgrade/upgrade-5.0.3.0.3-5.0.3.0.4.sql

+-- upgrade-upgrade-5.0.3.0.3-5.0.3.0.4.sql
+SELECT acs_log__debug('/packages/intranet-dynfield/sql/postgresql/upgrade/upgrade-5.0.3.0.3-5.0.3.0.4.sql','');
+
+
+
+
+-- Add javascript calendar buton on date widget
+UPDATE im_dynfield_widgets 
+SET parameters = '{format "YYYY-MM-DD"} {after_html {
+<input type="button" id=''${attribute_name}_calendar'' style="height:20px; width:20px; background: url(''/resources/acs-templating/calendar.gif'');"> 
+<script type="text/javascript" nonce="[im_csp_nonce]">
+window.addEventListener(''load'', function() { 
+     document.getElementById(''${attribute_name}_calendar'').addEventListener(''click'', function() { showCalendarWithDateWidget(''${attribute_name}'', ''y-m-d''); });
+});
+</script>
+}}' 
+WHERE widget_name = 'date';
+
+
+
+-- Add javascript calendar buton on date widget
+UPDATE im_dynfield_widgets 
+SET parameters = '{format "YYYY-MM-DD HH24:MI"} {after_html {
+<input type="button" id=''${attribute_name}_calendar'' style="height:20px; width:20px; background: url(''/resources/acs-templating/calendar.gif'');"> 
+<script type="text/javascript" nonce="[im_csp_nonce]">
+window.addEventListener(''load'', function() { 
+     document.getElementById(''${attribute_name}_calendar'').addEventListener(''click'', function() { showCalendarWithDateWidget(''${attribute_name}'', ''y-m-d''); });
+});
+</script>
+}}' 
+WHERE widget_name = 'timestamp';
+

www/permissions.adp

@@ -6,7 +6,7 @@
 <property name="left_navbar">@left_navbar_html;literal@</property>
 </if>
 
-<script type="text/javascript">
+<script type="text/javascript" <if @::__csp_nonce@ not nil>nonce="@::__csp_nonce;literal@"</if>>
         $(document).ready(function () {
             function hideCol($table, idx) {
 				if (idx != 1 && idx != 2) {