Why CSP makes all Honey pot inputs appear |
Hi, I have set
PHP Code: public $CSPEnabled = true; and also it breaks HTML SVG I have forced by using Code: (display: none! important) On a contrary, I see that it looks like there is a mild issue in CSP!!!??? Codeigniter First, Codeigniter Then You!!
yekrinaDigitals
(12-26-2022, 07:20 PM)kenjis Wrote:(12-26-2022, 02:42 AM)luckmoshy Wrote: Hi, I have set I mean I have set CSP PHP Code: public $CSPEnabled = true; Code: <div style="display:none"><label>Fill this filed?</label><input type="text" name="honeypot" value=""></div> Code: dispaly: none! important The hidden Honeyport input field now is appearing!!! SVG was the same color brown now is looking dark!!!! as per Content Security Policy: My inline scripts and CSS Code: <script <?= csp_script_nonce() ?>> Codeigniter First, Codeigniter Then You!!
yekrinaDigitals
Oh, I got it. It is a bug in Honeypot.
I sent a PR to fix it.
https://github.com/codeigniter4/CodeIgniter4/pull/7029 I sent it to 4.3 branch because I need to add new config item. (12-26-2022, 11:53 PM)kenjis Wrote: I sent a PR to fix it. Thank you so much @kenjis Codeigniter First, Codeigniter Then You!!
yekrinaDigitals
|
Welcome Guest, Not a member yet? Register Sign In |