New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

CSP - Externe Datei wird geladen und style Angaben direkt am HTML-Tag #538

Open

tbaddade opened this issue Jul 5, 2023 · 2 comments

Labels

Member

tbaddade commented Jul 5, 2023

Description / Beschreibung

Das betrifft den Vendor phpstan-baseline-analysis

Style Angaben direkt am HTML Tag
https://github.com/FriendsOfREDAXO/rexstan/blob/main/vendor/staabm/phpstan-baseline-analysis/lib/GraphTemplate.php#L127C53-L127C53

Externe Datei wird geladen
https://github.com/FriendsOfREDAXO/rexstan/blob/main/vendor/staabm/phpstan-baseline-analysis/lib/GraphTemplate.php#L173C19-L173C19

Bei entsprechendem CSP Header wird beides vom Browser ignoriert.

Nonce Attribute fehlt
https://github.com/FriendsOfREDAXO/rexstan/blob/main/vendor/staabm/phpstan-baseline-analysis/lib/GraphTemplate.php#L128C28-L128C28

Für Redaxo habe ich hierzu diesen Commit im AddOn erstellt.
d4e62e6

The text was updated successfully, but these errors were encountered:

staabm added the help wanted label

Member

staabm commented Aug 23, 2023

ist das thema noch offen oder bereits durch die gemergten PRs erledigt?

Member

staabm commented Sep 23, 2023

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment