Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

CSP - Externe Datei wird geladen und style Angaben direkt am HTML-Tag #538

Open
tbaddade opened this issue Jul 5, 2023 · 2 comments
Open

CSP - Externe Datei wird geladen und style Angaben direkt am HTML-Tag #538

tbaddade opened this issue Jul 5, 2023 · 2 comments
Labels
help wanted Extra attention is needed

Comments

@tbaddade
Copy link
Member

tbaddade commented Jul 5, 2023

Description / Beschreibung

Das betrifft den Vendor phpstan-baseline-analysis

Style Angaben direkt am HTML Tag
https://github.com/FriendsOfREDAXO/rexstan/blob/main/vendor/staabm/phpstan-baseline-analysis/lib/GraphTemplate.php#L127C53-L127C53

Externe Datei wird geladen
https://github.com/FriendsOfREDAXO/rexstan/blob/main/vendor/staabm/phpstan-baseline-analysis/lib/GraphTemplate.php#L173C19-L173C19

Bei entsprechendem CSP Header wird beides vom Browser ignoriert.

Nonce Attribute fehlt
https://github.com/FriendsOfREDAXO/rexstan/blob/main/vendor/staabm/phpstan-baseline-analysis/lib/GraphTemplate.php#L128C28-L128C28

Für Redaxo habe ich hierzu diesen Commit im AddOn erstellt.
d4e62e6
@staabm staabm added the help wanted Extra attention is needed label Aug 23, 2023
@staabm
Copy link
Member

staabm commented Aug 23, 2023

ist das thema noch offen oder bereits durch die gemergten PRs erledigt?

@staabm
Copy link
Member

staabm commented Sep 23, 2023

ping @tbaddade

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
help wanted Extra attention is needed
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@staabm @tbaddade