Patch Release : Merge pull request #409 from helloextend/M247-CSP-bug…

…fix_2 added CSP rules for magento 2.4.7
helloextend · Aug 6, 2024 · 33764bb · 33764bb
2 parents 5a3e2ab + 1168660
commit 33764bb
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 0 deletions.
diff --git a/etc/csp_whitelist.xml b/etc/csp_whitelist.xml
@@ -33,6 +33,8 @@
         <policy id="script-src">
             <values>
                 <value id="*_helloextend_com" type="host">https://*.helloextend.com</value>
+                <value id="hash_001" type="hash" algorithm="sha256">KZHlBYblIYP4tX324FVPX46za0oJoKk21aOj3W9FsXM=</value>
+                <value id="hash_002" type="hash" algorithm="sha256">QuHysN6c/5qe4aMDS5vmHINfpyGvbZj91l1plBH8Tsg=</value>
             </values>
         </policy>
         <policy id="connect-src">

diff --git a/view/frontend/templates/installation.phtml b/view/frontend/templates/installation.phtml
@@ -15,6 +15,7 @@ $viewModel = $block->getData('viewModel');
     <?php $jsonConfig = $viewModel->getJsonConfig(); ?>
     <?php if ($jsonConfig): ?>
         <?php $libUrl = str_replace('.js', '', $viewModel->getJsMode()); ?>
+        <!-- hash_002 -->
         <script>
             require.config({
                 paths: {

diff --git a/view/frontend/templates/tracking/checkout-success.phtml b/view/frontend/templates/tracking/checkout-success.phtml
@@ -14,6 +14,7 @@
 
 <?php if ($block->getTrackingEnabled()): ?>
     <?php $cartTotal = $block->getCartTotal(); ?>
+    <!-- hash_001 -->
     <script>
         require(['Extend_Warranty/js/extendtrk/actions', 'extendSdk'], function(actions) {
             //<![CDATA[