Feature #76459

Add crossorigin property to JavaScript files

Added by Jacob Dreesen about 5 years ago. Updated almost 3 years ago.

Status:
Closed
Priority:
Should have
Assignee:
Category:
Frontend
Start date:
2016-06-05
Due date:
% Done:

100%

Estimated time:
PHP Version:
Tags:
Complexity:
Sprint Focus:

Description

Add support for CORS settings attributes for JavaScript files.

This is mainly needed for loading remote JavaScript files for example from a CDN, especially when used together with Subresource Integrity (SRI) (which was added in #66698).

SRI requires CORS to work and thus is not usable without the crossorigin attribute for JavaScript files coming from other domains (origins). (Note that CORS must be enabled by the CDN, too.)

Therefore the crossorigin attribute should be automatically added with an anonymous value for external JavaScript files when SRI is enabled and the user does not explicitely set it.


Related issues

Related to TYPO3 Core - Bug #78262: Missing CORS settings attribute when using integrity with includeJSClosedXavier Perseguers2016-10-12

Actions
Has duplicate TYPO3 Core - Bug #76944: Subrequest-integrity should also add cross-origin headerRejected2016-07-05

Actions
Has duplicate TYPO3 Core - Bug #77873: Missing crossorigin property for JavaScript files (SRI)ClosedMathias Brodala2016-09-07

Actions

Also available in: Atom PDF