Skip to content

erp5
erp5
Commit 58167e35 authored by Romain Courteaud's avatar Romain Courteaud
Browse files
Options

erp5_web_renderjs_ui: remove unsafe-eval CSP 

It was required by Handlebars
parent 55efebea
Pipeline #8605 failed with stage
    in 0 seconds
    Hide whitespace changes
    Inline Side-by-side
    Showing with 165 additions and 101 deletions
    bt5/erp5_web_renderjs_ui/PathTemplateItem/web_site_module/renderjs_runner.xml
    View file @ 58167e35
    ...@@ -289,6 +289,26 @@ ...@@ -289,6 +289,26 @@
    <value> <string>string</string> </value> <value> <string>string</string> </value>
    </item> </item>
    </dictionary> </dictionary>
    <dictionary>
    <item>
    <key> <string>id</string> </key>
    <value> <string>configuration_precache_manifest_url_list</string> </value>
    </item>
    <item>
    <key> <string>type</string> </key>
    <value> <string>text</string> </value>
    </item>
    </dictionary>
    <dictionary>
    <item>
    <key> <string>id</string> </key>
    <value> <string>configuration_wallpaper_url</string> </value>
    </item>
    <item>
    <key> <string>type</string> </key>
    <value> <string>string</string> </value>
    </item>
    </dictionary>
    </tuple> </tuple>
    </value> </value>
    </item> </item>
    ...@@ -337,7 +357,7 @@ ...@@ -337,7 +357,7 @@
    </item> </item>
    <item> <item>
    <key> <string>configuration_content_security_policy</string> </key> <key> <string>configuration_content_security_policy</string> </key>
    <value> <string>default-src \'self\'; img-src \'self\' data:; media-src \'self\' blob:; connect-src \'self\' data:; script-src \'self\' \'unsafe-eval\'; font-src \'self\'; style-src \'self\' data:; frame-src \'self\' data:</string> </value> <value> <string>default-src \'self\'; img-src \'self\' data:; media-src \'self\' blob:; connect-src \'self\' data:; script-src \'self\'; font-src \'self\'; style-src \'self\' data:; frame-src \'self\' data:</string> </value>
    </item> </item>
    <item> <item>
    <key> <string>configuration_default_view_action_reference</string> </key> <key> <string>configuration_default_view_action_reference</string> </key>
    ...@@ -371,6 +391,12 @@ ...@@ -371,6 +391,12 @@
    <key> <string>configuration_panel_gadget_url</string> </key> <key> <string>configuration_panel_gadget_url</string> </key>
    <value> <string>gadget_erp5_panel.html</string> </value> <value> <string>gadget_erp5_panel.html</string> </value>
    </item> </item>
    <item>
    <key> <string>configuration_precache_manifest_url_list</string> </key>
    <value>
    <none/>
    </value>
    </item>
    <item> <item>
    <key> <string>configuration_service_worker_url</string> </key> <key> <string>configuration_service_worker_url</string> </key>
    <value> <string>gadget_erp5_serviceworker.js</string> </value> <value> <string>gadget_erp5_serviceworker.js</string> </value>
    ...@@ -383,6 +409,12 @@ ...@@ -383,6 +409,12 @@
    <key> <string>configuration_view_action_category</string> </key> <key> <string>configuration_view_action_category</string> </key>
    <value> <string>object_view</string> </value> <value> <string>object_view</string> </value>
    </item> </item>
    <item>
    <key> <string>configuration_wallpaper_url</string> </key>
    <value>
    <none/>
    </value>
    </item>
    <item> <item>
    <key> <string>configuration_x_frame_options</string> </key> <key> <string>configuration_x_frame_options</string> </key>
    <value> <string>SAMEORIGIN</string> </value> <value> <string>SAMEORIGIN</string> </value>
    ...@@ -407,10 +439,22 @@ ...@@ -407,10 +439,22 @@
    <key> <string>id</string> </key> <key> <string>id</string> </key>
    <value> <string>renderjs_runner</string> </value> <value> <string>renderjs_runner</string> </value>
    </item> </item>
    <item>
    <key> <string>int_index</string> </key>
    <value>
    <none/>
    </value>
    </item>
    <item> <item>
    <key> <string>layout_configuration_form_id</string> </key> <key> <string>layout_configuration_form_id</string> </key>
    <value> <string>WebSection_viewRenderJSPreference</string> </value> <value> <string>WebSection_viewRenderJSPreference</string> </value>
    </item> </item>
    <item>
    <key> <string>membership_criterion_category</string> </key>
    <value>
    <tuple/>
    </value>
    </item>
    <item> <item>
    <key> <string>portal_type</string> </key> <key> <string>portal_type</string> </key>
    <value> <string>Web Site</string> </value> <value> <string>Web Site</string> </value>
    ...@@ -429,6 +473,18 @@ ...@@ -429,6 +473,18 @@
    <key> <string>static_language_selection</string> </key> <key> <string>static_language_selection</string> </key>
    <value> <int>1</int> </value> <value> <int>1</int> </value>
    </item> </item>
    <item>
    <key> <string>string_index</string> </key>
    <value>
    <none/>
    </value>
    </item>
    <item>
    <key> <string>test_method_id</string> </key>
    <value>
    <tuple/>
    </value>
    </item>
    <item> <item>
    <key> <string>title</string> </key> <key> <string>title</string> </key>
    <value> <string>RenderJS Runner</string> </value> <value> <string>RenderJS Runner</string> </value>
    ...@@ -536,114 +592,122 @@ ...@@ -536,114 +592,122 @@
    </record> </record>
    <record id="9" aka="AAAAAAAAAAk="> <record id="9" aka="AAAAAAAAAAk=">
    <pickle> <pickle>
    <global name="WorkflowHistoryList" module="Products.ERP5Type.patches.WorkflowTool"/> <global name="WorkflowHistoryList" module="Products.ERP5Type.Workflow"/>
    </pickle> </pickle>
    <pickle> <pickle>
    <tuple> <dictionary>
    <none/> <item>
    <list> <key> <string>_log</string> </key>
    <dictionary> <value>
    <item> <list>
    <key> <string>action</string> </key> <dictionary>
    <value> <string>publish</string> </value> <item>
    </item> <key> <string>action</string> </key>
    <item> <value> <string>publish</string> </value>
    <key> <string>actor</string> </key> </item>
    <value> <string>superklaus</string> </value> <item>
    </item> <key> <string>actor</string> </key>
    <item> <value> <string>superklaus</string> </value>
    <key> <string>comment</string> </key> </item>
    <value> <string></string> </value> <item>
    </item> <key> <string>comment</string> </key>
    <item> <value> <string></string> </value>
    <key> <string>error_message</string> </key> </item>
    <value> <string></string> </value> <item>
    </item> <key> <string>error_message</string> </key>
    <item> <value> <string></string> </value>
    <key> <string>time</string> </key> </item>
    <value> <item>
    <object> <key> <string>time</string> </key>
    <klass> <value>
    <global name="DateTime" module="DateTime.DateTime"/> <object>
    </klass> <klass>
    <tuple> <global name="DateTime" module="DateTime.DateTime"/>
    <none/> </klass>
    </tuple> <tuple>
    <state> <none/>
    <tuple> </tuple>
    <float>1447856705.38</float> <state>
    <string>UTC</string> <tuple>
    </tuple> <float>1447856705.38</float>
    </state> <string>UTC</string>
    </object> </tuple>
    </value> </state>
    </item> </object>
    <item> </value>
    <key> <string>validation_state</string> </key> </item>
    <value> <string>published</string> </value> <item>
    </item> <key> <string>validation_state</string> </key>
    </dictionary> <value> <string>published</string> </value>
    </list> </item>
    </tuple> </dictionary>
    </list>
    </value>
    </item>
    </dictionary>
    </pickle> </pickle>
    </record> </record>
    <record id="10" aka="AAAAAAAAAAo="> <record id="10" aka="AAAAAAAAAAo=">
    <pickle> <pickle>
    <global name="WorkflowHistoryList" module="Products.ERP5Type.patches.WorkflowTool"/> <global name="WorkflowHistoryList" module="Products.ERP5Type.Workflow"/>
    </pickle> </pickle>
    <pickle> <pickle>
    <tuple> <dictionary>
    <none/> <item>
    <list> <key> <string>_log</string> </key>
    <dictionary> <value>
    <item> <list>
    <key> <string>action</string> </key> <dictionary>
    <value> <string>edit</string> </value> <item>
    </item> <key> <string>action</string> </key>
    <item> <value> <string>edit</string> </value>
    <key> <string>actor</string> </key> </item>
    <value> <string>zope</string> </value> <item>
    </item> <key> <string>actor</string> </key>
    <item> <value> <string>zope</string> </value>
    <key> <string>comment</string> </key> </item>
    <value> <item>
    <none/> <key> <string>comment</string> </key>
    </value> <value>
    </item> <none/>
    <item> </value>
    <key> <string>error_message</string> </key> </item>
    <value> <string></string> </value> <item>
    </item> <key> <string>error_message</string> </key>
    <item> <value> <string></string> </value>
    <key> <string>serial</string> </key> </item>
    <value> <string>973.33482.4166.8669</string> </value> <item>
    </item> <key> <string>serial</string> </key>
    <item> <value> <string>982.49998.55063.39219</string> </value>
    <key> <string>state</string> </key> </item>
    <value> <string>current</string> </value> <item>
    </item> <key> <string>state</string> </key>
    <item> <value> <string>current</string> </value>
    <key> <string>time</string> </key> </item>
    <value> <item>
    <object> <key> <string>time</string> </key>
    <klass> <value>
    <global name="DateTime" module="DateTime.DateTime"/> <object>
    </klass> <klass>
    <tuple> <global name="DateTime" module="DateTime.DateTime"/>
    <none/> </klass>
    </tuple> <tuple>
    <state> <none/>
    <tuple> </tuple>
    <float>1553593373.77</float> <state>
    <string>UTC</string> <tuple>
    </tuple> <float>1585149135.27</float>
    </state> <string>UTC</string>
    </object> </tuple>
    </value> </state>
    </item> </object>
    </dictionary> </value>
    </list> </item>
    </tuple> </dictionary>
    </list>
    </value>
    </item>
    </dictionary>
    </pickle> </pickle>
    </record> </record>
    </ZopeData> </ZopeData>
    Markdown is supported
    0% or
    You are about to add 0 people to the discussion. Proceed with caution.
    Finish editing this message first!
    Please register or to comment
    GitLab Nexedi Edition | About GitLab | About Nexedi | 沪ICP备2021021310号-2 | 沪ICP备2021021310号-7