search

sonata-project / SonataDashboardBundle

[Abandoned] Provides a Dashboard management through container and block services
https://docs.sonata-project.org/projects/SonataDashboardBundle
MIT License
16 stars 21 forks source link

Remove inline scripts #64

Closed core23 closed 3 years ago

core23 commented 8 years ago

For many reasons, we should remove all scripts from the templates. We could replace them with data listerns like in the page bundle: https://github.com/sonata-project/SonataPageBundle/pull/562.

General

Inline scripts couldn't be cached and would pollute the html output.

Security

There is also a security bundle which introduces some interesting information about security. You could completly disable inline script via a http header to reduce possible XSS attacks.

For more information: http://www.w3.org/TR/CSP/

Todo

The following files contains inline scripts and should be removed.

stale[bot] commented 4 years ago

Is this still relevant? If so, what is blocking it? Is there anything you can do to help move it forward?

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.

core23 commented 3 years ago

Closing this as this project is abandoned #326