Index: openacs-4/packages/xotcl-core/tcl/chat-procs.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/xotcl-core/tcl/Attic/chat-procs.tcl,v
diff -u -r1.23.2.4 -r1.23.2.5
--- openacs-4/packages/xotcl-core/tcl/chat-procs.tcl	1 Nov 2016 18:54:06 -0000	1.23.2.4
+++ openacs-4/packages/xotcl-core/tcl/chat-procs.tcl	11 Nov 2016 00:31:10 -0000	1.23.2.5
@@ -279,7 +279,7 @@
 
   Chat instproc js_encode_msg {msg} {
     set json [my json_encode_msg $msg]
-    return "<script type='text/javascript' language='javascript'>
+    return "<script type='text/javascript' language='javascript' nonce='$::__csp_nonce'>
     var data = $json;
     parent.getData(data);
     </script>\n"