Adding filter options is not possible if "backend enforce content security" policy is enabled

tpwd / ke_search

Search Extension for TYPO3 Content Management System, including faceting search functions.

https://extensions.typo3.org/extension/ke_search/

GNU General Public License v3.0

7 stars 31 forks source link

Adding filter options is not possible if "backend enforce content security" policy is enabled #194

Closed christianbltr closed 4 months ago

christianbltr commented 10 months ago

In TYPO3 12 if the feature toggle "Security: backend enforce content security policy" is enabled it is not possible to add filter options to filters.

Auswahl_044 Auswahl_043

christianbltr commented 4 months ago

As of today I'm not able to reprouce this (Tested with TYPO3 12.4.0 and ke_search 5.1.0 and with TYPO3 12.4.1 and ke_search 5.4.1) in a ddev environment. So I'm closing this.

Inovanet commented 1 month ago

By adding $GLOBALS['TYPO3_CONF_VARS']['SYS']['features']['security.backend.enforceContentSecurityPolicy'] = false; in for example a plugin in ext_localconf adding filters is working.

It's also possible to add $GLOBALS['TYPO3_CONF_VARS']['BE']['contentSecurityPolicyReportingUrl'] = 'http://example.com/'; to further restrict / allow CSP.