Paragraphs with CSP module, break Ckeditor in closed editing mode

Created on 5 May 2022, about 3 years ago
Updated 22 July 2025, 12 days ago

Problem/Motivation

When loading a node edit page with a paragraph field, which includes am editor enabled text area using the Paragraphs Classic widget, it does not seem to detect that CKEditor is being used, and fails to take the measures add the unsafe-inline CSP option.

This can be mitigated by allowing "unsafe-inline" globally for the "script-src-attr" setting. Which is not ideal.

I'm not sure what this module's policy is for supporting other modules, but Paragraphs is pretty common.

Steps to reproduce

* Install CSP.
* Install Paragraphs.
* Add a Paragraph field to a node, use the "Classic widget" and set the edit mode to closed.
* Create a node. with a paragraph that includes a CKEditor enabled text field.

Proposed resolution

Install the patch of the third comment.

Remaining tasks

...

User interface changes

API changes

Data model changes

🐛 Bug report
Status

Active

Version

1.14

Component

Code

Created by

🇫🇷France Nono95230

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

  • 🇩🇪Germany pminf Nuremburg (Germany), formerly Dresden

    I can confirm that this is still an issue with Drupal 10.4.8 and Paragraphs 1.19.0.

Production build 0.71.5 2024