feat: Add CSP nonce support for @paddlejs directive (#297)

Author: sgasser

resources/views/js.blade.php

@@ -13,16 +13,18 @@
 if (isset($seller['pwAuth']) && Auth::check() && $customer = Auth::user()->customer) {
     $seller['pwCustomer'] = ['id' => $customer->paddle_id];
 }
+
+$nonce = $nonce ?? '';
 ?>
 
-<script src="https://cdn.paddle.com/paddle/v2/paddle.js"></script>
+<script src="https://cdn.paddle.com/paddle/v2/paddle.js" @if ($nonce) nonce="{{ $nonce }}" @endif></script>
 
 @if (config('cashier.sandbox'))
-    <script type="text/javascript">
+    <script type="text/javascript" @if ($nonce) nonce="{{ $nonce }}" @endif>
         Paddle.Environment.set('sandbox');
     </script>
 @endif
 
-<script type="text/javascript">
+<script type="text/javascript" @if ($nonce) nonce="{{ $nonce }}" @endif>
     Paddle.Initialize(@json($seller));
 </script>

src/CashierServiceProvider.php

@@ -93,8 +93,8 @@ protected function bootPublishing()
      */
     protected function bootDirectives()
     {
-        Blade::directive('paddleJS', function () {
-            return "<?php echo view('cashier::js'); ?>";
+        Blade::directive('paddleJS', function ($expression) {
+            return "<?php echo view('cashier::js', ['nonce' => {$expression}['nonce'] ?? '']); ?>";
         });
     }