From e298643266d7b1178d353bb076c40feec216a67d Mon Sep 17 00:00:00 2001
From: Daniel Gaspar <danielvazgaspar@gmail.com>
Date: Fri, 22 Sep 2023 09:52:35 +0100
Subject: [PATCH] fix: swagger missing nonce

---
 flask_appbuilder/templates/appbuilder/init.html       |  2 +-
 .../templates/appbuilder/swagger/swagger.html         | 11 +++++------
 2 files changed, 6 insertions(+), 7 deletions(-)

diff --git a/flask_appbuilder/templates/appbuilder/init.html b/flask_appbuilder/templates/appbuilder/init.html
index 6ebf8b0409..62608c0f7a 100644
--- a/flask_appbuilder/templates/appbuilder/init.html
+++ b/flask_appbuilder/templates/appbuilder/init.html
@@ -27,7 +27,7 @@
       {% endif %}
       <link href="{{url_for('appbuilder.static',filename='datepicker/bootstrap-datepicker.css')}}" rel="stylesheet">
       <link href="{{url_for('appbuilder.static',filename='select2/select2.css')}}" rel="stylesheet">
-        <link href="{{url_for('appbuilder.static',filename='select2/select2-bootstrap-theme.css')}}" rel="stylesheet">
+      <link href="{{url_for('appbuilder.static',filename='select2/select2-bootstrap-theme.css')}}" rel="stylesheet">
       <link href="{{url_for('appbuilder.static',filename='css/flags/flags16.css')}}" rel="stylesheet">
       <link href="{{url_for('appbuilder.static',filename='css/ab.css')}}" rel="stylesheet">
     {% endblock %}
diff --git a/flask_appbuilder/templates/appbuilder/swagger/swagger.html b/flask_appbuilder/templates/appbuilder/swagger/swagger.html
index 40cce6707b..9cf29b6c87 100644
--- a/flask_appbuilder/templates/appbuilder/swagger/swagger.html
+++ b/flask_appbuilder/templates/appbuilder/swagger/swagger.html
@@ -3,17 +3,17 @@
 {% block head_css %}
     {{ super() }}
     <link type="text/css" rel="stylesheet"
-          href="https://cdn.jsdelivr.net/npm/swagger-ui-dist@4/swagger-ui.css">
-    <link rel="shortcut icon" href="https://fastapi.tiangolo.com/img/favicon.png">
+          href="https://cdn.jsdelivr.net/npm/swagger-ui-dist@5/swagger-ui.css"
+          nonce="{{ baselib.get_nonce() }}">
 {% endblock %}
 
 {% block content %}
     <div id="swagger-ui">
     </div>
-    <script src="https://cdn.jsdelivr.net/npm/swagger-ui-dist@4/swagger-ui-bundle.js" nonce="{{ baselib.get_nonce() }}"></script>
+    <script src="https://cdn.jsdelivr.net/npm/swagger-ui-dist@5/swagger-ui-bundle.js"
+            nonce="{{ baselib.get_nonce() }}"></script>
     <!-- `SwaggerUIBundle` is now available on the page -->
-    <script>
-
+    <script nonce="{{ baselib.get_nonce() }}">
         const ui = SwaggerUIBundle({
             url: '{{openapi_uri}}',
             dom_id: '#swagger-ui',
@@ -22,7 +22,6 @@
                 SwaggerUIBundle.SwaggerUIStandalonePreset
             ],
             layout: "BaseLayout"
-
         })
     </script>
 {% endblock %}