CSP - onunload Attribute entfernt (#5745)

redaxo · Jul 30, 2023 · 606cc8a · 606cc8a
1 parent 185d124
commit 606cc8a
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/redaxo/src/core/assets/standard.js b/redaxo/src/core/assets/standard.js
@@ -2,6 +2,11 @@
  REDAXO JavaScript library
  */
 
+// -------------------------------------------------------------------------------------------------------------------
+window.addEventListener("unload", (event) => {
+    closeAll();
+});
+
 // -------------------------------------------------------------------------------------------------------------------
 
 function getObj(name)

diff --git a/redaxo/src/core/layout/top.php b/redaxo/src/core/layout/top.php
@@ -26,7 +26,6 @@
 $bodyId = rex::isSetup() ? 'setup' : rex_string::normalize(rex_be_controller::getCurrentPage(), '-', ' ');
 
 $bodyAttr['id'] = ['rex-page-' . $bodyId];
-$bodyAttr['onunload'] = ['closeAll();'];
 
 $bodyAttr['class'] = ['rex-is-logged-out'];
 if ($user) {