Summary: | Allow to add jQuery directly in custom pages | ||
---|---|---|---|
Product: | Koha | Reporter: | Andrew Fuerste-Henry <andrewfh> |
Component: | Tools | Assignee: | Bugs List <koha-bugs> |
Status: | NEW --- | QA Contact: | Testopia <testopia> |
Severity: | enhancement | ||
Priority: | P5 - low | CC: | dcook, lucas |
Version: | Main | ||
Hardware: | All | ||
OS: | All | ||
Change sponsored?: | --- | Patch complexity: | --- |
Documentation contact: | Documentation submission: | ||
Text to go in the release notes: | Version(s) released in: | ||
Bug Depends on: | 15326 | ||
Bug Blocks: | |||
Attachments: | Bug 36152: Tidy |
Description
Andrew Fuerste-Henry
2024-02-22 16:17:25 UTC
Inline Javascript and CSS will be a problem for the eventual adoption of Content-Security-Policy. If it were to be done, I think it would need to be stored in separate database columns, so that a CSP nonce could be added to it in the templates. (In reply to David Cook from comment #1) > Inline Javascript and CSS will be a problem for the eventual adoption of > Content-Security-Policy. > > If it were to be done, I think it would need to be stored in separate > database columns, so that a CSP nonce could be added to it in the templates. Then this seems like it would be more trouble then it is worth when we already have a good place for the JS, the USerJS's. I do sympathize with Andrew's problem. If you have a custom page that displays on the OPAC and staff interface you'll need to duplicate JS and put in both OPACJS and IntranetUserJS. (In reply to Lucas Gass from comment #2) > Then this seems like it would be more trouble then it is worth when we > already have a good place for the JS, the USerJS's. > > I do sympathize with Andrew's problem. If you have a custom page that > displays on the OPAC and staff interface you'll need to duplicate JS and put > in both OPACJS and IntranetUserJS. That would be an annoying problem. Overall, I'm unhappy with how we're doing HTML/CSS/JS content management in Koha. It is tough having Koha be all things to all people, and trying to maintain the balance of security and convenience... Created attachment 164691 [details] [review] Bug 36152: Tidy |