Index: openacs-4/packages/xowiki/www/portlet-ajax.adp
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/xowiki/www/portlet-ajax.adp,v
diff -u -N -r1.3 -r1.3.4.1
--- openacs-4/packages/xowiki/www/portlet-ajax.adp	13 Sep 2012 16:05:30 -0000	1.3
+++ openacs-4/packages/xowiki/www/portlet-ajax.adp	11 Nov 2016 00:08:16 -0000	1.3.4.1
@@ -1,7 +1,7 @@
 <div class="portlet-title">
 <span>@title@</span>
 </div>
-<script type="text/javascript">
+<script type="text/javascript"<if @::__csp_nonce@ not nil> nonce="@::__csp_nonce;literal@"</if>>
 function get() {
   var http = getHttpObject();
   http.open('GET', '@portlet@', true);
Index: openacs-4/packages/xowiki/www/ckeditor-images/index.adp
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/xowiki/www/ckeditor-images/index.adp,v
diff -u -N -r1.5.2.4 -r1.5.2.5
--- openacs-4/packages/xowiki/www/ckeditor-images/index.adp	6 Nov 2016 14:17:24 -0000	1.5.2.4
+++ openacs-4/packages/xowiki/www/ckeditor-images/index.adp	11 Nov 2016 00:08:16 -0000	1.5.2.5
@@ -2,7 +2,7 @@
 <head>
 <title>CKeditor</title>
 <script type="text/javascript" src="/resources/xowiki/jquery/jquery.min.js"></script>
-<script type="text/javascript">
+<script type="text/javascript"<if @::__csp_nonce@ not nil> nonce="@::__csp_nonce;literal@"</if>>
 
     $(document).ready(function() {
         hideImageHolder();
Index: openacs-4/packages/xowiki/www/ckeditor-images/thumb-view.adp
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/xowiki/www/ckeditor-images/thumb-view.adp,v
diff -u -N -r1.7.2.1 -r1.7.2.2
--- openacs-4/packages/xowiki/www/ckeditor-images/thumb-view.adp	9 Jun 2016 13:01:42 -0000	1.7.2.1
+++ openacs-4/packages/xowiki/www/ckeditor-images/thumb-view.adp	11 Nov 2016 00:08:16 -0000	1.7.2.2
@@ -2,7 +2,7 @@
 <head>
 <title>CKeditor</title>
 <script type="text/javascript" src="/resources/xowiki/jquery/jquery.min.js"></script>
-<script type="text/javascript">
+<script type="text/javascript"<if @::__csp_nonce@ not nil> nonce="@::__csp_nonce;literal@"</if>>
 
 function changePreview(url,name,mime) {
   $("#preview", parent.document).append(function() {
Index: openacs-4/packages/xowiki/www/ckeditor-images/upload_image.adp
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/xowiki/www/ckeditor-images/upload_image.adp,v
diff -u -N -r1.5.2.2 -r1.5.2.3
--- openacs-4/packages/xowiki/www/ckeditor-images/upload_image.adp	6 Nov 2016 14:17:24 -0000	1.5.2.2
+++ openacs-4/packages/xowiki/www/ckeditor-images/upload_image.adp	11 Nov 2016 00:08:16 -0000	1.5.2.3
@@ -26,7 +26,7 @@
 	}
 	form { padding: 0px; margin: 0px; }
 </style>
-<script type="text/javascript">
+<script type="text/javascript"<if @::__csp_nonce@ not nil> nonce="@::__csp_nonce;literal@"</if>>
 @js_update;noquote@
 </script>
 </head>
