Bug #104727: Mode "reduce" in csp.yaml not working - TYPO3 Core - TYPO3 Forge

Actions

Bug #104727

closed

Status:

Closed

Priority:

Should have

Assignee:

Category:

Content Security Policy

Target version:

Start date:

2024-08-25

Due date:

% Done:

100%

Estimated time:

TYPO3 Version:

PHP Version:

Tags:

Complexity:

Is Regression:

Sprint Focus:

Description

I defined the following csp.yaml:

inheritDefault: true
mutations:
  - mode: reduce
    directive: 'style-src-attr'
    sources:
      - "'unsafe-inline'"

to remove the 'unsafe-inline" source from "style-src-attr". However, the header still sends it:

style-src-attr 'unsafe-inline' 'report-sample';

Actions

Patch set 1 for branch main of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/85812

Actions

Patch set 1 for branch 12.4 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/85841

Actions