chore: Remove CSP nonce

Author: steverydz

templates/_base-layout.html

@@ -14,19 +14,18 @@
     <link rel="preload" href="https://assets.ubuntu.com/v1/9689339a-snapcraft-hero-background--light.png" as="image">
 
     <!-- Google Tag Manager -->
-    <script nonce="{{ CSP_NONCE }}">(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
+    <script>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
     new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
     j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
-    'https://www.googletagmanager.com/gtm.js?id='+i+dl;var n=d.querySelector('[nonce]');
-    n&&j.setAttribute('nonce',n.nonce||n.getAttribute('nonce'));f.parentNode.insertBefore(j,f);
+    'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
     })(window,document,'script','dataLayer','GTM-KCGXHQS');</script>
     <!-- End Google Tag Manager -->
 
     {{ vite_import('static/sass/styles.scss') }}
 
     {{ vite_import('static/js/base/base.ts') }}
     {% block scripts_includes %}{% endblock %}
-    <script src="https://assets.ubuntu.com/v1/703e23c9-lazysizes+noscript+native-loading.5.1.2.min.js" defer nonce="{{ CSP_NONCE }}"></script>
+    <script src="https://assets.ubuntu.com/v1/703e23c9-lazysizes+noscript+native-loading.5.1.2.min.js" defer></script>
 
     <meta name="description" content="{% block meta_description %}Snaps are containerised software packages that are simple to create and install. They auto-update and are safe to run. And because they bundle their dependencies, they work on all major Linux systems without modification.{% endblock %}">
     <meta name="copydoc" content="{% block meta_copydoc %}{% endblock %}">
@@ -81,14 +80,14 @@
 
     {% block scripts %}{% endblock %}
 
-    <script nonce="{{ CSP_NONCE }}">
+    <script>
       window.COMMIT_ID = "{{ COMMIT_ID }}";
       window.ENVIRONMENT = "{{ ENVIRONMENT }}";
       window.SENTRY_DSN = "{{ SENTRY_DSN }}";
       window.ANALYTICS_ENDPOINT = "{{ ANALYTICS_ENDPOINT }}";
     </script>
 
-  <script type="application/ld+json" nonce="{{ CSP_NONCE }}">
+  <script type="application/ld+json">
       {
         "@context": "http://schema.org/",
         "@id": "https://snapcraft.io/#organization",
@@ -107,7 +106,7 @@
       }
     </script>
 
-    <script type="application/ld+json" nonce="{{ CSP_NONCE }}">
+    <script type="application/ld+json">
       {
         "@context": "http://schema.org",
         "@id": "https://snapcraft.io/#website",

templates/_layout-embedded.html

@@ -45,7 +45,7 @@
 
     {% block scripts %}{% endblock %}
 
-    <script type="application/ld+json" nonce="{{ CSP_NONCE }}">
+    <script type="application/ld+json">
       {
         "@context": "http://schema.org/",
         "@id": "https://snapcraft.io/#organization",

templates/about/publish.html

@@ -196,7 +196,7 @@ <h3 class="p-heading--5">Trave CI, Circle CI and GitHub Actions are all supporte
 {% endblock %}
 
 {% block scripts %}
-<script nonce="{{ CSP_NONCE }}">
+<script>
   window.addEventListener("DOMContentLoaded", function () {
     try {
       snapcraft.about.initFSFLanguageSelect(document.querySelector('.js-fsf-language-select'));

templates/admin/admin.html

@@ -6,7 +6,7 @@
 <div id="root">
 </div>
 
-<script nonce="{{ CSP_NONCE }}">
+<script>
   window.CSRF_TOKEN = "{{ csrf_token() }}";
   window.SENTRY_DSN = "{{ SENTRY_DSN }}";
   window.API_URL = "{{ api_url }}";

templates/blog/article.html

@@ -9,7 +9,7 @@
 {% endif %}
 
 {% block meta_schema %}
-<script type="application/ld+json" nonce="{{ CSP_NONCE }}">
+<script type="application/ld+json">
     {
       "@context": "http://schema.org",
       "@id": "https://snapcraft.io/#article",
@@ -98,7 +98,7 @@ <h4>
   </section>
 {% endif %}
 
-<script type="text/template" id="blog-series-item-template" nonce="{{ CSP_NONCE }}">
+<script type="text/template" id="blog-series-item-template">
   <li class="p-list__item">
     <h5>
       <a href="/blog/${slug}" class="p-blog-list__item ${className}">
@@ -114,7 +114,7 @@ <h5>
 {% endblock %}
 
 {% block scripts %}
-  <script nonce="{{ CSP_NONCE }}">
+  <script>
     window.addEventListener("DOMContentLoaded", function() {
       try {
         {% if is_in_series %}

templates/blog/index.html

@@ -148,7 +148,7 @@ <h5 class="p-notification__title">Success</h5>
 {% endblock %}
 
 {% block scripts %}
-  <script nonce="{{ CSP_NONCE }}">
+  <script>
     window.addEventListener("DOMContentLoaded", function() {
       try {
         {% if categories %}

templates/docs/document.html

@@ -161,7 +161,7 @@ <h4 class="p-table-of-contents__header">On this page</h4>
 {% endblock %}
 
 {% block scripts %}
-<script nonce="{{ CSP_NONCE }}">
+<script>
   window.addEventListener("DOMContentLoaded", function() {
     try {
        // Based on Vanilla side navigation example

templates/index.html

@@ -164,12 +164,12 @@ <h2>Measure user growth</h2>
 {{ vite_import('static/js/public/homepage.ts') }}
 {{ vite_import('static/js/public/featured-snaps.ts') }}
 {% if nps %}
-<script src="//app-sjg.marketo.com/js/forms2/js/forms2.min.js" defer nonce="{{ CSP_NONCE }}"></script>
+<script src="//app-sjg.marketo.com/js/forms2/js/forms2.min.js" defer></script>
 {% endif %}
 {% endblock %}
 
 {% block scripts %}
-<script nonce="{{ CSP_NONCE }}">
+<script>
   window.addEventListener("DOMContentLoaded", function () {
     try {
       snapcraft.public.homepage.initFSFLanguageSelect();

templates/partials/_video.html

@@ -15,7 +15,7 @@
   <div id="asciicastplayer"></div>
 {% endif %}
 
-<script nonce="{{ CSP_NONCE }}">
+<script>
   document.addEventListener("DOMContentLoaded", function() {
     const vimeoplayerFrame = document.getElementById("vimeoplayer");
     const asciicastplayerFrame = document.getElementById("asciicastplayer");

templates/publisher/collaboration.html

@@ -6,7 +6,7 @@
 
 {% block content %}
 <main id="main-content"></main>
-<script nonce="{{ CSP_NONCE }}">
+<script>
   window.SENTRY_DSN = "{{ SENTRY_DSN }}";
   window.CSRF_TOKEN = "{{ csrf_token() }}";
   window.data = JSON.parse({{ collaborations_data|tojson }});