TYPO3 12 CSP settings

[emileblume]

The inline script <script data-ignore="1"> is being blocked by the Content Security Policy in TYPO3 12.4.9. Unsafe inline can't be used when the nonce option is used.

[featdd]

Hi @emileblume,

updating the assets injection to using the newer asset collector should to the trick.
Can you give me feedback if this worked for you too?

Solved here: 51ee941

Greetings
Daniel

[featdd]

Hi @emileblume,

even though you found a workaround as mentioned here: 51ee941#commitcomment-135558997 this should be the preferable solution, so thanks anyway for the hint.

I'll keep this and prepare a new TER update in the new year, then you can update as you like.

Greetings
Daniel

[featdd]

Hi @emileblume,

I just published a new update to TER.

Greetings
Daniel

[emileblume]

@featdd That's great, thanks!