TYPO3 Core

In order to allow that some 3rd party extension is retrieving data from remote sources, this has to be declared in a structured way in a extension manifest.

Idea/Documentation:¶

• https://developer.android.com/guide/topics/manifest/manifest-intro

Example (this requires more research on standards and how it could be declared better):

{
  "remoteSources": {
    "script": [
    ],
    "style": [
      "type": "font",
      "url": "https://use.fontawesome.com/releases/v5.6.3/css/all.css",
      "description": "In order to make use of... (description for admin that grants access to this resource)" 
    ]
  }
}

Current Draft¶

• see https://notes.typo3.org/yq1hOL2NSaiqH0jcFREQsA?view
• or markdown file attached to this issue
• consider adding signatures/hashes over content to be embedded (→ someone™ would have to verify the content)