[TASK] Add Content-Security-Policy hash declarations
Add the possibility to extend the Content-Security-Policy model by cryptographic hashes - which can either be static or a dynamic proxy: * `$type = HashType::sha256;` * `new HashValue('<base64-hash>', $type);` * `HashProxy::glob('EXT:my/Resources/Public/*.js')->withType($type);` * `HashProxy::urls('https://example.org/worker.js')->withType($type);` Resolves: #100141 Related: #99499 Releases: main Change-Id: I7a3ee4fdea2c87bce9fc013688ffba7f21b680aa Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/78102 Reviewed-by:Andreas Fernandez <a.fernandez@scripting-base.de> Tested-by:
Benni Mack <benni@typo3.org> Tested-by:
core-ci <typo3@b13.com> Reviewed-by:
Benni Mack <benni@typo3.org> Tested-by:
Andreas Fernandez <a.fernandez@scripting-base.de>
Showing
- typo3/sysext/core/Classes/Security/ContentSecurityPolicy/HashProxy.php 180 additions, 0 deletions...core/Classes/Security/ContentSecurityPolicy/HashProxy.php
- typo3/sysext/core/Classes/Security/ContentSecurityPolicy/HashType.php 46 additions, 0 deletions.../core/Classes/Security/ContentSecurityPolicy/HashType.php
- typo3/sysext/core/Classes/Security/ContentSecurityPolicy/HashValue.php 83 additions, 0 deletions...core/Classes/Security/ContentSecurityPolicy/HashValue.php
- typo3/sysext/core/Classes/Security/ContentSecurityPolicy/ModelService.php 38 additions, 5 deletions...e/Classes/Security/ContentSecurityPolicy/ModelService.php
- typo3/sysext/core/Classes/Security/ContentSecurityPolicy/Mutation.php 3 additions, 3 deletions.../core/Classes/Security/ContentSecurityPolicy/Mutation.php
- typo3/sysext/core/Classes/Security/ContentSecurityPolicy/Policy.php 15 additions, 24 deletions...xt/core/Classes/Security/ContentSecurityPolicy/Policy.php
- typo3/sysext/core/Classes/Security/ContentSecurityPolicy/RawValue.php 1 addition, 1 deletion.../core/Classes/Security/ContentSecurityPolicy/RawValue.php
- typo3/sysext/core/Classes/Security/ContentSecurityPolicy/SourceCollection.php 7 additions, 8 deletions...asses/Security/ContentSecurityPolicy/SourceCollection.php
- typo3/sysext/core/Classes/Security/ContentSecurityPolicy/SourceInterface.php 29 additions, 0 deletions...lasses/Security/ContentSecurityPolicy/SourceInterface.php
- typo3/sysext/core/Classes/Security/ContentSecurityPolicy/SourceKeyword.php 3 additions, 1 deletion.../Classes/Security/ContentSecurityPolicy/SourceKeyword.php
- typo3/sysext/core/Classes/Security/ContentSecurityPolicy/SourceScheme.php 1 addition, 1 deletion...e/Classes/Security/ContentSecurityPolicy/SourceScheme.php
- typo3/sysext/core/Classes/Security/ContentSecurityPolicy/SourceValueInterface.php 52 additions, 0 deletions...s/Security/ContentSecurityPolicy/SourceValueInterface.php
- typo3/sysext/core/Classes/Security/ContentSecurityPolicy/UriValue.php 1 addition, 1 deletion.../core/Classes/Security/ContentSecurityPolicy/UriValue.php
- typo3/sysext/core/Tests/Functional/Security/ContentSecurityPolicy/PolicyTest.php 57 additions, 0 deletions.../Functional/Security/ContentSecurityPolicy/PolicyTest.php
- typo3/sysext/core/Tests/Unit/Security/ContentSecurityPolicy/Fixtures/app-fixture.css 1 addition, 0 deletions...t/Security/ContentSecurityPolicy/Fixtures/app-fixture.css
- typo3/sysext/core/Tests/Unit/Security/ContentSecurityPolicy/Fixtures/app-fixture.js 1 addition, 0 deletions...it/Security/ContentSecurityPolicy/Fixtures/app-fixture.js
- typo3/sysext/core/Tests/Unit/Security/ContentSecurityPolicy/PolicyTest.php 14 additions, 3 deletions.../Tests/Unit/Security/ContentSecurityPolicy/PolicyTest.php
Please register or sign in to comment