Index: openacs-4/packages/xotcl-core/tcl/message-relay-procs.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/xotcl-core/tcl/Attic/message-relay-procs.tcl,v
diff -u -N -r1.1.2.5 -r1.1.2.6
--- openacs-4/packages/xotcl-core/tcl/message-relay-procs.tcl	25 Apr 2019 15:41:27 -0000	1.1.2.5
+++ openacs-4/packages/xotcl-core/tcl/message-relay-procs.tcl	25 Apr 2019 15:47:22 -0000	1.1.2.6
@@ -82,8 +82,12 @@
       if {$mode eq "scripted"} {
         #::sec_handler_reset
         #ns_log notice "SEND data <$msg> encoded <$emsg>"
-        set jsMsg "<script type='text/javascript' nonce='$::__csp_nonce'>\nvar data = $msg;\n\
-               parent.getData(data);</script>\n"
+        set jsMsg [subst {
+          <script nonce='[::security::csp::nonce]'>
+              var data = $msg;
+              parent.getData(data);
+          </script>
+        }]
         set msg [format %x [string length $jsMsg]]\r\n$jsMsg\r\n
       }
       #ns_log notice "#### [self] encode_message <$mode> returns <$msg>"