Project

General

Profile

Actions
Copy link

Feature #76459

closed

Add crossorigin property to JavaScript files

Added by Jacob Dreesen over 8 years ago. Updated about 6 years ago.

Status:
Closed
Priority:
Should have
Assignee:
Jacob Dreesen
Category:
Frontend
Target version:
Candidate for patchlevel
Start date:
2016-06-05
Due date:
% Done:

100%

Estimated time:
PHP Version:
Tags:
Complexity:
Sprint Focus:

Description

Add support for CORS settings attributes for JavaScript files.

This is mainly needed for loading remote JavaScript files for example from a CDN, especially when used together with Subresource Integrity (SRI) (which was added in #66698).

SRI requires CORS to work and thus is not usable without the crossorigin attribute for JavaScript files coming from other domains (origins). (Note that CORS must be enabled by the CDN, too.)

Therefore the crossorigin attribute should be automatically added with an anonymous value for external JavaScript files when SRI is enabled and the user does not explicitely set it.

Related issues 3 (0 open — 3 closed)

Related to TYPO3 Core - Bug #78262: Missing CORS settings attribute when using integrity with includeJSClosedXavier Perseguers2016-10-12

Actions
Has duplicate TYPO3 Core - Bug #76944: Subrequest-integrity should also add cross-origin headerRejected2016-07-05

Actions
Has duplicate TYPO3 Core - Bug #77873: Missing crossorigin property for JavaScript files (SRI)ClosedMathias Brodala2016-09-07

Actions
Actions
Copy link

Also available in: Atom PDF