Skip to content
Snippets Groups Projects
Commit 85da01dc authored by Oliver Hader's avatar Oliver Hader Committed by Oliver Hader
Browse files

[TASK] Use ConsumableNonce instead of blunt Nonce in CSP context

To identify whether a nonce values was actually used (consumed),
`ConsumableNonce` instances are used, instead of `Nonce` objects.
The new `ConsumableNonce` inherits from `ConsumableString`.

As a result, the `<f:security.nonce>` view helper would increase
the consumption counter. This is important for additional cache
handling in the frontend rendering context.

Resolves: #101751
Releases: main, 12.4
Change-Id: Iea147b0130e3d350f5913dc75f33af61c18e8af3
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/80235


Tested-by: default avatarcore-ci <typo3@b13.com>
Tested-by: default avatarOliver Hader <oliver.hader@typo3.org>
Reviewed-by: default avatarOliver Hader <oliver.hader@typo3.org>
parent d5043eb1
Branches
Tags
No related merge requests found
Showing
with 104 additions and 78 deletions
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment