19
votes
Magento 2.3.5 Content Security Policy false positive cdn fonts
Hello I am also just about to read in. If you have an own module in the app/code then you must create the following file.
app/code/modul_modul/etc/csp_whitelist.xml
Example:
<?xml version="1.0"?&...
- 478
15
votes
Accepted
Magento 2.3.5 Content Security Policy (CSP) data:image
In your custom csp_whitelist.xml (eg. in a custom modules etc-directory) add this:
<policy id="img-src">
<values>
<value id="data" type="host">data:</value>
</...
11
votes
Magento 2.3.5 Content Security Policy directive: "img-src
As of version 2.3.5, Magento supports Content Security Policy headers and provides ways to configure them.
Content Security Policies (CSP) are a powerful tool to mitigate
against Cross Site ...
- 5,954
9
votes
Magento 2.3.5 error gd2.php on installation
I found a workaround for Windows OS. Image Adapter try opens to image files ('open function in Gd2.php line 63). validateURLScheme function return false always because it checking 'URL' format but ...
- 800
9
votes
Accepted
Magento2.3.5-P1 - Fatal Error: 'Cannot declare class Zend_Http_Client, because the name is already in use
UPDATE:
@Renon Steward's answer fixed the issue
Try open composer.json and remove use-include-path or the entire config element if this is the only entry.
"config": {
"use-include-path": true
},...
- 106
7
votes
How can I fix "Refused to load the stylesheet because it violates the following Content" in Magento 2.3.5
Magento 2.3.5 p1 added a new module module-csp ( Magento_Csp ) which supports Content Security Policies ( CSP ) headers and provides ways to configure them. The policies can be configured for backend ...
- 629
7
votes
In magento 2.3.5 Swagger is not working (Failed to load API definition.)
There is a \Datetime error breaking SOAP 2.3.5 so it is affecting swagger tool. Run command below to resolve that issue.
php bin/magento module:disable --clear-static-content Dotdigitalgroup_Email ...
- 4,044
7
votes
Accepted
Magento 2.3.5 Custom Module "Invalid security or form key. Please refresh the page"
In this case, I was accessing the wrong route, rather than /adminurl/vendor_module/store/ which caused the error message about an invalid key, I needed to go to /adminurl/vendor_module/store/index/.
I ...
- 378
5
votes
Accepted
Magento 2.3.5 Content Security Policy false positive cdn fonts
etc/csp_whitelist.xml
Need to implement our own whitelist using above file
see https://devdocs.magento.com/guides/v2.4/extension-dev-guide/security/content-security-policies.html
pros:
format ...
- 731
5
votes
Accepted
How can I fix "Refused to load the stylesheet because it violates the following Content" in Magento 2.3.5
I have this code and it works fine:
<?xml version="1.0" encoding="UTF-8"?>
<csp_whitelist xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="urn:magento:...
- 922
5
votes
Accepted
Magento CE 2.3.5-p1 Admin error when editing product - Session ID is not used as URL parameter anymore
This is because an old extension tries to use session parameters which was deprecated. We tried fixing this using DonB from Florida's answer. But that shows only a part of the problem. Best is to use ...
- 130
5
votes
Accepted
Magento 2.3.5 Category backend data-binding not working & Category Frontend Landing Pages not showing (Migrated Data from Magento 1.7x)
Thanks to LitExtension Magento Migration for pointing me in the right direction. The issue is that catalog_category_entity and eav_entity_attribute tables does not have the same IDs set for ...
- 782
5
votes
Accepted
Limit Product Name
Try this following code :-
Go to your theme and add this code :-
app/design/frontend/Vendor_Name/Theme_Name/Magento_Catalog/templates/product/list.phtml
<?php
$productName = $_helper->...
- 3,923
5
votes
Accepted
Undefined variable: escaper (Magento 2 @var syntax)
It looks like the theme you bought is for magento 2.4
You can see more details in this question and answer: Sanitizing HTML output in templates in 2.4 and in the official documentation https://...
- 198k
4
votes
Accepted
Shipment emails not sent for new orders after upgrade to 2.3.5 - can still send for old orders without errors
This is due to using a previous email template which isn't fully supported.
Within the email template, this block isn't supported:
{{
block class='Magento\\Framework\\View\\Element\\Template'
area=...
- 652
4
votes
Magento2.3.5-P1 - Fatal Error: 'Cannot declare class Zend_Http_Client, because the name is already in use
This issue seems to only affect users upgrading from a previous version of Magento 2.
Try open composer.json and remove use-include-path or the entire config element if this is the only entry.
"...
- 13.9k
4
votes
Magento 2.3.5 Content Security Policy directive: "img-src
This works for me - csp_whitelist.xml
<csp_whitelist xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="urn:magento:module:Magento_Csp:etc/...
4
votes
Accepted
Data migration Eav step error - duplicate
First check this link :- https://github.com/magento/data-migration-tool/issues/235#issuecomment-321923437
Solution is to rename all values containing the name "Default" in "...
- 3,923
4
votes
Accepted
Magento 2.3 prefix admin not displayed as dropdown
You will need to extends/customise the forms that are used in the backend to render the customer's forms.
for instance, customer_address_form.xml may be customised with:
<?xml version="1.0&...
- 7,728
3
votes
Accepted
Magento 2.3.5 Incompatible argument type errors during compilation
check below code
Category.php (just replace below the constructor)
public function __construct(
\Magento\Catalog\Block\Product\Context $context,
\Magento\Catalog\Model\...
- 3,368
3
votes
Magento 2.3.5 error gd2.php on installation
Make sure GD2 extension is installed and enabled in the php.ini file.
Replace the function validateURLScheme with below code
https://github.com/magento/magento2/blob/2.3.5-p2/lib/internal/Magento/...
- 2,093
3
votes
Limit Product Name
You can use this code
<div class="product description product-item-description">
<?php echo mb_strimwidth($_item->getShortDescription(), 0, 60, '...'); ?>
</div>
- 61
3
votes
Accepted
Upgrade Magento2.3.5-p1 to Magento 2.3.5-p2
That depends on how you installed Magento. Also note you should install updates on a development environment and full test your site before replicating on a production environment.
Composer
# Run from ...
- 1,910
3
votes
Cache:Flush fails after updating from Magento 2.3.4-p2 to 2.3.5-p2
I had the same problem when upgrading from 2.3.5-p1 to 2.3.5-p2, even when the deployment included disabling the Magento_GoogleShoppingAds module in config.php.
In my case the solution was to flush ...
- 278
3
votes
Accepted
Varnish Cache Magento 2 SSL offloading - X-Forwarded-Proto: https vs SSL-OFFLOADED: https
Because Varnish Cache doesn't have native TLS support, you'll need TLS termination software to handle the TLS part for you. This also means that Varnish only accepts plain HTTP.
However, your Magento ...
- 1,096
3
votes
How can I reset two factor authentication on 2.3.5?
Reset 2FA Info
bin/magento msp:security:tfa:reset --help
Description:
Reset configuration for one user
Usage:
msp:security:tfa:reset <user> <provider>
Arguments:
user ...
- 5,493
3
votes
Accepted
Magento 2: Cart price rule Actions dynamically add text field using UI Components
You can add your custom dynamic fields to the sales rule form by customizing the vendor/magento/module-sales-rule/view/adminhtml/ui_component/sales_rule_form.xml file.
To customize the above file, we ...
- 1,164
2
votes
Magento 2.3.5 Content Security Policy false positive cdn fonts
You can just disable Magento_Csp entirely in Magento 2.3.5 since it offers little or no value.
More info https://maxchadwick.xyz/blog/magento-2-3-5-csp-fools-errand https://maxchadwick.xyz/blog/...
- 121
2
votes
Magento 2.3.5 SOAP DateTime is invalid
This is caused by a Dotmailer bug: https://github.com/dotmailer/dotmailer-magento2-extension/issues/560
Upgrade or remove the module.
- 2,963
2
votes
Magento 2.3.5: Showing Invalid Form key on every page
Ok I fixed this error by updating my cps_whitelist.xml file.
Unfortunately I can't say what policy fixed it.
I think it was in policy id="connect-src" for Facebook.com
https://sherocommerce....
- 21
Only top scored, non community-wiki answers of a minimum length are eligible