Task #87418

Epic #87417: Integrate proper Content Security Policy (CSP) handling

Refactor and remove usage of inline scripts in backend

Added by Oliver Hader almost 2 years ago. Updated 2 months ago.

Status:
Accepted
Priority:
Should have
Assignee:
-
Category:
Backend JavaScript
Start date:
2020-04-13
Due date:
% Done:

65%

TYPO3 Version:
10
PHP Version:
Tags:
Complexity:
Sprint Focus:

Description

Dynamically generated <script> tags must be avoided and refactored to be used as static resources, dynamic use-cases have to be controlled by applying according settings (e.g. data-attributes and/or JSON configuration).

Examples (these resources have not been verified in detail and the list is not completed):

Search criteria:

  • <script>
  • GeneralUtility::wrapJS
  • GeneralUtility::writeJavaScriptContentToTemporaryFile
  • Response::addAdditionalHeaderData

Subtasks

Task #91015: Reduce inline JavaScript in ext:beuserClosedOliver Hader

Task #91016: Reduce inline JavaScript in ext:filelistClosedOliver Hader

Task #91052: Reduce inline onchange events in backend scopeClosedOliver Hader

Task #91109: Reduce inline JavaScript in ext:redirects and ext:schedulerClosedOliver Hader

Task #91110: Remove superfluous onclick events in FormEngineClosedOliver Hader

Task #91111: Reduce inline JavaScript in QueryViewClosedOliver Hader

Task #91117: Use GlobalEventHandler and ActionDispatcher instead of inline JSClosedOliver Hader

Task #91120: Remove superfluous inline JavaScript assignment in ext:beuserClosedOliver Hader

Task #91122: Introduce DocumentService as JQuery.ready substituteClosed

Task #91123: Avoid inline JavaScript generated by BackendUtility:viewOnClickUnder ReviewOliver Hader

Task #91124: Add substitutes for module menu navigationNewOliver Hader

Task #91125: Add substitutes for declaring static inline settingsNewOliver Hader

Task #91132: Reduce inline JavaScript in ext:setupResolvedOliver Hader

Task #91191: Reduce inline JavaScript for refreshing backend componentsResolvedOliver Hader

Task #91786: Replace RequireJS module loading and invocationNewOliver Hader

Task #91787: Deprecate and replace inline JavaScript in FormEngineNewOliver Hader

Task #91795: Replace window.open with WindowManager & PreviewUriBuilderNewOliver Hader

Task #91804: Remove inline JavaScript from backend paginate view helperResolvedOliver Hader

Task #91815: Remove window.open inline JavaScriptUnder ReviewOliver Hader

Task #91820: Remove inline onclick code from MoveElementControllerResolvedOliver Hader

History

#1 Updated by Oliver Hader almost 2 years ago

  • Tracker changed from Epic to Task
  • TYPO3 Version set to 10

#2 Updated by Georg Ringer 8 months ago

  • Status changed from New to Accepted

Also available in: Atom PDF