0004639: merchant frontends do not work with strict CSP

ID	Project	Category	View Status	Date Submitted	Last Update
0004639	Taler	taler-merchant-demos	public	2016-09-05 11:35	2024-01-12 13:08

Reporter	Florian Dold	Assigned To	Florian Dold	Resolution deadline
Implementer		Reviewer
Release signed by		Deployed by
Verifier		Communicator
Data protection authority notification required	No
CSIRT notification required	No
Estimated effort (hours)		Actual effort (hours)	0
Fast-track	No
Work package	none
Priority	normal	Severity	minor	Reproducibility	have not tried
Status	closed	Resolution	fixed
Product Version	0.0
Target Version	0.1	Fixed in Version	0.1

Summary	0004639: merchant frontends do not work with strict CSP
Description	... since in some cases, we dynamically generate JavaScript and inject it directly into the HTML. Instead, the JavaScript should be static and parse values out of the DOM.
Tags	No tags attached.

Date Modified	Username	Field	Change
2016-09-05 11:35	Florian Dold	New Issue
2016-09-05 14:32	Marcello Stanisci	Note Added: 0011089
2016-09-12 21:56	Florian Dold	Note Added: 0011112
2016-09-12 21:56	Florian Dold	Status	new => informing
2016-09-12 21:56	Florian Dold	Resolution	open => fixed
2016-09-12 21:56	Florian Dold	Assigned To	=> Florian Dold
2016-09-18 22:52	Christian Grothoff	Product Version	=> 0.0
2016-09-18 22:52	Christian Grothoff	Fixed in Version	=> 0.1
2016-09-18 22:52	Christian Grothoff	Target Version	=> 0.1
2016-10-11 15:28	Christian Grothoff	Status	informing => closed
2024-01-12 13:08	Christian Grothoff	Category	merchant frontend (blog) => Merchant frontends (Python3)
2026-08-23 14:16	Florian Dold	Category	Merchant frontends (Python3) => taler-merchant-demos

Marcello Stanisci 2016-09-05 14:32 reporter ~0011089	donation shop adapted but not tested since the bank needs also to be adapted.

Florian Dold 2016-09-12 21:56 manager ~0011112	Not tested yet (since we can't set headers until demo is upgraded), but we aren't using inline scripts or inline event handlers anymore.