gitlab-org--gitlab-foss/app/views/layouts/_init_auto_complete.html.haml

- object = @target_project || @project || @group
- noteable_type = @noteable_type || @noteable&.class

- datasources = autocomplete_data_sources(object, noteable_type)

- if object
  = javascript_tag do
    :plain
      gl = window.gl || {};
      gl.GfmAutoComplete = gl.GfmAutoComplete || {};
      gl.GfmAutoComplete.dataSources = #{datasources.to_json};
Backport of 4084-epics-username-autocomplete 2018-04-26 15:53:13 -04:00			`- object = @target_project \|\| @project \|\| @group`
Add latest changes from gitlab-org/gitlab@master 2022-01-10 13:14:07 -05:00			`- noteable_type = @noteable_type \|\| @noteable&.class`
Only load autocomplete data when actually needed Previously this would result in autocomplete data being loaded for every page (e.g. the page showing all Git branches of a project). 2016-01-11 05:06:00 -05:00
Backport of 4084-epics-username-autocomplete 2018-04-26 15:53:13 -04:00			`- datasources = autocomplete_data_sources(object, noteable_type)`

			`- if object`
Add latest changes from gitlab-org/gitlab@master 2020-11-26 13:09:18 -05:00			`= javascript_tag do`
Add support for Content-Security-Policy A nonce-based Content-Security-Policy thwarts XSS attacks by allowing inline JavaScript to execute if the script nonce matches the header value. Rails 5.2 supports nonce-based Content-Security-Policy headers, so provide configuration to enable this and make it work. To support this, we need to change all `:javascript` HAML filters to the following form: ``` = javascript_tag nonce: true do :plain ... ``` We use `%script` throughout our HAML to store JSON and other text, but since this doesn't execute, browsers don't appear to block this content from being used and require the nonce value to be present. 2019-08-06 02:14:32 -04:00			`:plain`
			`gl = window.gl \|\| {};`
			`gl.GfmAutoComplete = gl.GfmAutoComplete \|\| {};`
			`gl.GfmAutoComplete.dataSources = #{datasources.to_json};`