[
https://issues.apache.org/jira/browse/OFBIZ-11686?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17106253#comment-17106253 ]
ASF subversion and git services commented on OFBIZ-11686:
---------------------------------------------------------
Commit 803f7fa06048baa5c4246c80ff249cba2edb9451 in ofbiz-framework's branch refs/heads/trunk from James Yong
[
https://gitbox.apache.org/repos/asf?p=ofbiz-framework.git;h=803f7fa ]
Improved: <script-template> widget tag (OFBIZ-11686)
The new tag allows us to render a freemarker template containing javascript,
as external script in html instead of inline script.
This helps to reduce CSP errors.
> <script-template> widget tag
> ----------------------------
>
> Key: OFBIZ-11686
> URL:
https://issues.apache.org/jira/browse/OFBIZ-11686> Project: OFBiz
> Issue Type: Improvement
> Components: framework/widget
> Affects Versions: Upcoming Branch
> Reporter: James Yong
> Assignee: James Yong
> Priority: Minor
> Fix For: Trunk
>
> Attachments: OFBIZ-11686.patch, OFBIZ-11686.patch
>
>
> Propose a new <script-template> widget tag that adds an external script after body tag.
> The external script will contain the rendered result of the specified template file location.
> e.g.
> {code:xml}
> <html>
> <script-template location="component://order/template/quote/test.ftl"/>
> {code}
> <platform-specific>
> will render as:
> {code:xml}
> </body>
> <script src=“/ordermgr/control/getJs?name=test” type="application/javascript"/></script>
> </html>
> {code}
> This will allow inline script from a freemarker file, to be rendered as external script in html.
>
> Discussion was started at [
https://lists.apache.org/thread.html/r7f8db3a8f5de057c5c5ca6c00608e477acfeaf5507a20b72b8daa3a8%40%3Cdev.ofbiz.apache.org%3E]
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
Locked
