Project

General

Profile

Actions
Copy link

Task #100141

closed

Epic #87417: Integrate proper Content Security Policy (CSP) handling

Feature #99499: Introduce Content Security Policy handling

Add possibility to add resource hashes

Added by Oliver Hader about 1 year ago. Updated 3 months ago.

Status:
Closed
Priority:
Should have
Assignee:
Oliver Hader
Category:
Security
Target version:
12 LTS
Start date:
2023-03-11
Due date:
% Done:

100%

Estimated time:
TYPO3 Version:
12
PHP Version:
Tags:
Complexity:
Sprint Focus:

Description

  • support SHA256 (default), SHA384 or SHA512 as HashType enum
  • HashValue('<base-64-value', HashType::SHA256)
  • HashFileCollection(['EXT:extension/Resources/Public/file.js'], HashType::SHA256)
  • SourceKeyword::unsafeHashes
  • extend documentation + info about consequences when using nonce or hash values

Related issues 2 (0 open — 2 closed)

Related to TYPO3 Core - Bug #101183: CSP hash values cannot be reconstitutedResolved2023-06-27

Actions
Is duplicate of TYPO3 Core - Feature #87420: Integrate signatures for Stylesheet and JavaScript resourcesClosed2019-01-13

Actions
Actions
Copy link

Also available in: Atom PDF