Skip to content

CSP configuration gets overwritten #63

Description

@woemar

In file https://github.com/xima-media/xm_formcycle/blob/10.0.2/Configuration/ContentSecurityPolicies.php the configuration for CSP settings of Directive::ScriptSrc and Directive::StyleSrcElem get overwritten, instead of extended or appended.

This will most certainly destroy any existing configuration of CSP.

I suggest to use MutationMode::Append for Directive::ScriptSrc and Directive::StyleSrcElem, which will "add" the xm_formcycle configuration to any already existing config.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions