Allow external script in multi-block html template to be headerized

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

Allow external script in multi-block html template to be headerized

James Yong-2
Hi all,

Currently setting multi-block=true for the html-template, allows inline script within the freemarker
to be transformed to an external script. This helps to reduce the CSP errors.

Propose to allow external scripts within the multi-block html template, to be rendered within the html head tag, when a new attribute data-import is set to “head” e.g.

<script src="/common/js/jquery/plugins/jsTree/jquery.jstree.js" type="application/javascript" data-import="head"></script>

With the new feature we can define external scripts in the multi-block html template that is using the library, instead of setting in layoutSetting.javaScripts.
This new feature helps with dependency management of Javascript and also reduce CSP errors.

Regards,
James
Reply | Threaded
Open this post in threaded view
|

Re: Allow external script in multi-block html template to be headerized

James Yong-2
Hi all,

Created JIRA issue OFBIZ-11741.
Also uploaded a patch usimg jstree library as example.
The library will only be loaded when required.

Regards,
James

On 2020/05/25 15:34:01, James Yong <[hidden email]> wrote:

> Hi all,
>
> Currently setting multi-block=true for the html-template, allows inline script within the freemarker
> to be transformed to an external script. This helps to reduce the CSP errors.
>
> Propose to allow external scripts within the multi-block html template, to be rendered within the html head tag, when a new attribute data-import is set to “head” e.g.
>
> <script src="/common/js/jquery/plugins/jsTree/jquery.jstree.js" type="application/javascript" data-import="head"></script>
>
> With the new feature we can define external scripts in the multi-block html template that is using the library, instead of setting in layoutSetting.javaScripts.
> This new feature helps with dependency management of Javascript and also reduce CSP errors.
>
> Regards,
> James
>