Content Security Policy

[morange]

There are also problems in TYPO3 v12.4 with the Content Security Policy in Front- and Backend.

[maikschneider]

Frontend: The default frontend template uses inline JS and CSS. This template is meant to be an example and needs adjustments to the specific requirements. So shipping a dedicated JS and CSS file is overkill since it musst be removed/replaced in any case. I'm pretty sure that users that activate the frontend CSP face enough problems to figure this out.

Backend: Yes, there is inline CSS in one template. However, I do not run into any problems - maybe because it's loaded via AJAX. Could you please paste the error log?

[morange]

Hej,
after moving the CSS and JS inline code to external files, only the JS problem remains. This means that the descriptions of the respective element are not displayed. I have actived the csp rules.
That is the error message in the console log:
Uncaught SyntaxError: redeclaration of const rects <anonymous> https://doku.muldenland.ddev.site/willkommen/allgemeines?ADMCMD_simUser=2#c184:1193 [allgemeines:1193:9](https://doku.muldenland.ddev.site/willkommen/allgemeines?ADMCMD_simUser=2#c184) Uncaught SyntaxError: redeclaration of const rects <anonymous> https://doku.muldenland.ddev.site/willkommen/allgemeines?ADMCMD_simUser=2#c184:1347