Workbox window script module should be printed with `wp_print_inline_script_tag()`

[westonruter]

Given this code here:

pwa-wp/wp-includes/service-workers.php

Lines 184 to 195 in f2a0ad4

	<script type="module">
	import { Workbox } from <?php echo wp_json_encode( $workbox_window_src ); ?>;
	if ( 'serviceWorker' in navigator ) {
	window.wp = window.wp || {};
	window.wp.serviceWorkerWindow = new Workbox(
	<?php echo wp_json_encode( $sw_src ); ?>,
	<?php echo wp_json_encode( $register_options ); ?>
	);
	window.wp.serviceWorkerWindow.register();
	}
	</script>

The lack of wp_print_inline_script_tag() means that CSP nonce attribute cannot be injected.

Related: #1241

[westonruter]

Here is workaround plugin code to fix this in the meantime:

/**
 * Use wp_print_inline_script_tag() for printing the service worker script module.
 *
 * @see https://github.com/GoogleChromeLabs/pwa-wp/issues/1240
 */
add_action(
	'init',
	static function () {
		foreach ( array( 'wp_print_footer_scripts', 'admin_print_scripts', 'customize_controls_print_scripts', 'login_footer', 'after_signup_form', 'activate_wp_head', 'admin_print_footer_scripts' ) as $action ) {
			$priority = has_action( $action, 'wp_print_service_workers' );
			if ( false === $priority ) {
				continue;
			}

			remove_action( $action, 'wp_print_service_workers', $priority );
			add_action(
				$action,
				static function () {
					ob_start();
					wp_print_service_workers();
					$script = ob_get_clean();

					$processor = new WP_HTML_Tag_Processor( $script );
					if ( $processor->next_tag( 'SCRIPT' ) ) {
						wp_print_inline_script_tag( $processor->get_modifiable_text(), array( 'type' => 'module' ) );
					}
				},
				$priority
			);
		}
	}
);