Project

General

Profile

Actions

Bug #100968

closed

nonce missing from script tags when USER_INT content on page

Added by Ben McKenzie about 1 year ago. Updated 8 days ago.

Status:
Closed
Priority:
Must have
Assignee:
-
Category:
Frontend
Target version:
-
Start date:
2023-06-07
Due date:
% Done:

100%

Estimated time:
TYPO3 Version:
12
PHP Version:
8.2
Tags:
Complexity:
Is Regression:
Sprint Focus:

Description

When a non-cacheable extbase plugin is present on the page, scripts (inline and otherwise) have the nonce attribute on the first page load after flushing the cache. But on subsequent page loads the nonce is missing.

This issue does not seem to occur when all plugins on the page are cached.

The cause appears to be in RequestHandler , where PageRenderer 's nonce property is only set if $controller->isGeneratePage() returns true.


Related issues 1 (0 open1 closed)

Related to TYPO3 Core - Bug #100665: Handle dynamic nonce update in cached HTML markupClosed2023-04-19

Actions
Actions

Also available in: Atom PDF