TYPO3 Core

Current behavior¶

The csp.yaml file will not replace placeholders like %env(MY_VAR)%

Expected behavior¶

The csp.yaml is parsed like the config.yaml and replaces placeholders as described in documentation.

Steps to reproduce¶

Create config/sites/*/csp.yaml with content like:

inheritDefault: false
mutations:
  - mode: set
    directive: 'default-src'
    sources:
      - "'self'" 
      - '%env(MAIN_SITE_BASE_URI)%'
      - '%env(SUB_SITE_BASE_URI)%'

As seen in sample, especially for multi-site systems, but also in single site environments this is helpful to keep base URL definition in central place which also reduce chance of spelling mistakes while defined in multiple files.