Web Development

window.coreExternal {
  setCommissionStartDate,
  setCommissionStopDate, and so forth

$nonce = base64_encode(random_bytes(16));
header("Content-Security-Policy: default-src 'self' *.fontawesome.com; script-src 'self' 'unsafe-inline' /pcad/assets/scripts/core/ https://kit.fontawesome.com/ 'nonce-".$nonce."' 'sha256-...'; style-src 'self'; img-src 'self' data:;");

1. Do I need the access-control headers?
2. Did I paint myself into a corner using modules the way I did?
3. Is one policy canceling another policy?

Quote:

Content-Security-Policy: The page’s settings blocked the loading of a resource at inline (“style-src”).
Source: --bs-breadcrumb-divider: '>'; viewVendors.phtml

Quote:

Content-Security-Policy: The page’s settings blocked the loading of a resource at inline (“style-src”).
Source: width: 100%; border: none; viewVendors.phtml

header("Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0");
header("Pragma: no-cache");
header("Strict-Transport-Security: max-age=31536000; includeSubDomains; preload");
header("X-Content-Type-Options: nosniff");
header("X-Frame-Options: DENY");
header("X-XSS-Protection: 1; mode=block");
header('Referrer-Policy: same-origin');

header("Access-Control-Allow-Origin: self");   // Replace * with the actual origin(s) you want to allow
header("Access-Control-Allow-Methods: GET, POST, OPTIONS");
header("Access-Control-Allow-Headers: Content-Type");
header("Access-Control-Expose-Headers: *");

// Best Version that works - 01/24/2024 jKirkerx - Warning: Content-Security-Policy: The page’s settings blocked the loading of a resource at https://kit.fontawesome.com/ea5e36f877.js ("script-src").
header("Content-Security-Policy: default-src 'self' *.fontawesome.com; script-src 'self' 'unsafe-inline' /pcad/assets/scripts/core/ https://kit.fontawesome.com/ 'nonce-".$nonce."' 'sha256-...'; style-src 'self'; img-src 'self' data:;");

const dude = {
  name: 'dude',
  namedFunc() {
    console.log('name 1: ', this.name); // Dude

    setTimeout(function() {
      console.log('this 1:', this);
      console.log('name 2:', this.name); // undefined
    }, 200);
  },
  arrowFunc() {
    // temos scope tb...
    console.log('name 3:', this.name); // Dude

    setTimeout(() => {
      console.log('this 2:', this); // {name: 'dude', nameWNamed: ƒ, nameWArrow: ƒ}
      console.log('name 4:', this.name); // Dude
    }, 300)
  }
}

console.log('namedFunc:', dude.namedFunc());
console.log('arrowFunc:', dude.arrowFunc());

this 1: {name: 'dude', namedFunc: ƒ, arrowFunc: ƒ}
name 2: dude
this 2: Window {window: Window, self: Window, document: document, name: '', location: Location, …}
name 4: 

this 1: Window {window: Window, self: Window, document: document, name: '', location: Location, …}
name 2: 
this 2: {name: 'dude', namedFunc: ƒ, arrowFunc: ƒ}
name 4: dude