- Implemented CSP (Content Security Policy)

sql/postgresql/intranet-workflow-create.sql

@@ -231,7 +231,7 @@ values (260, 'workflow_home_inbox', '');
 
 insert into im_view_columns (column_id, view_id, column_name, column_render_tcl, sort_order) 
 values (26090,260,
-	'<input type=checkbox onclick="acs_ListCheckAll(''action'',this.checked)">',
+	'<input id=list_check_all_workflow type=checkbox>',
 	'"<input type=checkbox name=task_id value=$task_id id=action,$task_id>"',
 -10);
 

tcl/intranet-workflow-procs.tcl

@@ -1470,6 +1470,13 @@ ad_proc -public im_workflow_home_inbox_component {
     }
 
     return "
+
+	<script type=\"text/javascript\" nonce=\"[im_csp_nonce]\">
+	window.addEventListener('load', function() {
+	    document.getElementById('list_check_all_workflow').addEventListener('click', function() { acs_ListCheckAll('action', this.checked) });
+	});
+	</script>
+
         <form action=[ad_conn url] method=GET>
         [export_vars -form $filter_passthrough_vars]
         <table cellspacing=0 cellpadding=0 border=0>