Index: openacs-4/packages/xotcl-core/tcl/bgdelivery-procs.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/xotcl-core/tcl/bgdelivery-procs.tcl,v
diff -u -r1.49.2.4 -r1.49.2.5
--- openacs-4/packages/xotcl-core/tcl/bgdelivery-procs.tcl	1 Nov 2016 18:54:06 -0000	1.49.2.4
+++ openacs-4/packages/xotcl-core/tcl/bgdelivery-procs.tcl	11 Nov 2016 00:31:10 -0000	1.49.2.5
@@ -328,7 +328,7 @@
     if {[my mode] eq "scripted"} {
       set emsg [encoding convertto utf-8 $msg]
       #ns_log notice "SEND data <$msg> encoded <$emsg>"
-      set smsg "<script type='text/javascript'>\nvar data = $emsg;\n\
+      set smsg "<script type='text/javascript' nonce='$::__csp_nonce'>\nvar data = $emsg;\n\
             parent.getData(data);</script>\n"
       set smsg [format %x [string length $smsg]]\r\n$smsg\r\n
     } else {