From 63d92140824f51d5728d7e03ddb1d6fcecd13275 Mon Sep 17 00:00:00 2001
From: rulingcom <orbit@rulingcom.com>
Date: Fri, 31 Jul 2026 15:44:16 +0800
Subject: [PATCH] Replace inline onclick with data-track-click-url attribute
 (CSP compatibility, requires orbit-kernel core update)

---
 app/controllers/ad_banners_controller.rb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/controllers/ad_banners_controller.rb b/app/controllers/ad_banners_controller.rb
index ba9f8a2..2db6486 100644
--- a/app/controllers/ad_banners_controller.rb
+++ b/app/controllers/ad_banners_controller.rb
@@ -43,7 +43,7 @@ class AdBannersController < ApplicationController
           target = ""
         end
         if !b.out_link.blank?
-          image_link += "\" style=\"cursor:pointer;\" onclick=\"if(navigator.sendBeacon){navigator.sendBeacon('/ad_banners/track_click/#{b.id}');}\" onload=\"var el=this;(function(){if((el.parentElement==undefined||el.parentElement.tagName!='A')&&$('<p>'+$(el).parents('.w-ba-banner__slide').eq(0).attr('data-overlay-template')+'</p>').find('a').length==0){el.outerHTML=('<a href=#{b.out_link} target=#{target}>'+el.outerHTML+'</a>');}})()\""
+          image_link += "\" style=\"cursor:pointer;\" data-track-click-url=\"/ad_banners/track_click/#{b.id}\" onload=\"var el=this;(function(){if((el.parentElement==undefined||el.parentElement.tagName!='A')&&$('<p>'+$(el).parents('.w-ba-banner__slide').eq(0).attr('data-overlay-template')+'</p>').find('a').length==0){el.outerHTML=('<a href=#{b.out_link} target=#{target}>'+el.outerHTML+'</a>');}})()\""
         end
         context = (b.context.tr('"',"'") rescue "")
         images << {