Veilig inline scripting toestaan in Magento
Overschrijf in je thema de manier waarop de scripts worden ingeladen op deze manier.
PHP Code
php
<?php
/** @var \Magento\Framework\View\Helper\SecureHtmlRenderer $secureRenderer */
?>
<?php $secureRenderer->renderTag('script', ['type' => 'text/javascript'], "\nconsole.log('I am a whitelisted script');\n", false); ?>
of
<?php
/** @var \Magento\Framework\View\Helper\SecureHtmlRenderer $secureRenderer */
?>
<?= $secureRenderer->renderTag(
'script',
['type' => 'text/javascript'],
<<<JS
... hier je JavaScript ...
JS,
false
); ?>