-
Notifications
You must be signed in to change notification settings - Fork 9.4k
Open
Labels
Area: CatalogComponent: ImageIssue: ConfirmedGate 3 Passed. Manual verification of the issue completed. Issue is confirmedGate 3 Passed. Manual verification of the issue completed. Issue is confirmedPriority: P3May be fixed according to the position in the backlog.May be fixed according to the position in the backlog.Progress: ready for devReported on 2.4.6-p8Indicates original Magento version for the Issue report.Indicates original Magento version for the Issue report.Reproduced on 2.4.xThe issue has been reproduced on latest 2.4-develop branchThe issue has been reproduced on latest 2.4-develop branch
Description
Preconditions and environment
- 2.4.6-p8
- Magento Commerce Edition
Steps to reproduce
- Make sure the pagebuilder is used and
Use Static URLs for Media Content in WYSIWYG
is set to No (Stores > Config > General > Content Management > WYSIWYG Options) - Create a new CMS page (Content > [Elements] Pages). Allow for all stores
- When adding content, first add a row and within that row add a Text element
Insert/edit Image
button- On the right side of the Source field, press the 'browse files' button. This opens the
Select Images
overlay - Upload a new image and then select that image.
Expected result
The URL field is filled with the dynamic media url ({{media url="/path/to/image.jpg"}}
) but instead a fully resolved url is shown.
This result is expected because we use an internally uploaded image and it is not referring to a third party source.
Actual result
The URL to the selected image is completely resolved. Meaning that every website will resolve the same image. This causes issues with CSP.
Additional information
This is a multi-website shop and some sites share the same CMS information, so not all pages are linked to a store ID. Having a resolved URL means that the frontend will load images from another domain.
Release note
No response
Triage and priority
- Severity: S0 - Affects critical data or functionality and leaves users without workaround.
- Severity: S1 - Affects critical data or functionality and forces users to employ a workaround.
- Severity: S2 - Affects non-critical data or functionality and forces users to employ a workaround.
- Severity: S3 - Affects non-critical data or functionality and does not force users to employ a workaround.
- Severity: S4 - Affects aesthetics, professional look and feel, “quality” or “usability”.
Metadata
Metadata
Assignees
Labels
Area: CatalogComponent: ImageIssue: ConfirmedGate 3 Passed. Manual verification of the issue completed. Issue is confirmedGate 3 Passed. Manual verification of the issue completed. Issue is confirmedPriority: P3May be fixed according to the position in the backlog.May be fixed according to the position in the backlog.Progress: ready for devReported on 2.4.6-p8Indicates original Magento version for the Issue report.Indicates original Magento version for the Issue report.Reproduced on 2.4.xThe issue has been reproduced on latest 2.4-develop branchThe issue has been reproduced on latest 2.4-develop branch