Project

General

Profile

Bug #103673

Updated by Chris Müller 7 months ago

With EXT:schema, I am providing a custom admin panel module/submodule with JavaScript attached. The script tag does not get a nonce attribute for that submodule which results in a CSP violation when not allowing 'self', only nonce for scripts. 

 The reason for this: in ResourceUtility class the $attributes array (which holds the "useNonce" configuation) is not passed to the getAdditionalResourcesForModules() call.

Back