QUALITY PATCH

ACP2E-3838: Page Builder CORS errors prevent saving changes in the admin panel in production mode

Page Builder CORS errors prevent saving changes in the admin panel in production mode. Quality patch ACP2E-3838 for magento/module-csp applies to Magento Open Source and Adobe Commerce 2.4.4-p9 to 2.4.7-p4.

Categories
Content, Admin
Components
magento/module-csp
Origin
adobe-commerce-support
Since QPT
1.1.64

Issue

Page Builder CORS errors prevent saving changes in the admin panel in production mode.

Steps to reproduce

1. Log in to the admin panel. 1. Go to Content > Pages. 1. Click Add New Page, or select an existing CMS page and click Edit. 1. Click Edit with Page Builder to add a new content block or edit an existing block. 1. Make any changes to the content, such as adding text, images, or other elements. 1. Click the Save button.

Adobe's page lists 2.4.4-p9 - 2.4.4-p12, 2.4.5-p8 - 2.4.5-p11, 2.4.6-p6 - 2.4.6-p9, 2.4.7 - 2.4.7-p4 as compatible; the versions below are resolved from the current QPT constraints and are the ones the tool will offer.

Adobe scheduled the permanent fix for 2.4.8.

Install

Install the Quality Patches Tool with composer require magento/quality-patches, apply the prerequisites listed for all files applicable to your distribution and version first, then run vendor/bin/magento-patches apply ACP2E-3838. On Cloud, add ACP2E-3838 under stage.build.QUALITY_PATCHES in .magento.env.yaml.

For cweagans/composer-patches, choose a compatible version below and download the bundle. Copy its ACP2E-3838/ folder into patches/composer/, merge composer.patches.json into composer.json, then run composer install. Bundle prerequisites the same way and list them first. Paths are relative to each package root, using the default -p1 level. Prefer local files when configuring composer-patches; a remote URL can change.

Patch files and compatible versions

Packages across compatible versions (1): magento/module-csp
Packages across compatible versions (1): magento/module-csp

magento/magento2-base >=2.4.4-p9 <2.4.4-p13 || >=2.4.5-p8 <2.4.5-p12 || >=2.4.6-p6 <2.4.6-p10 || >=2.4.7 <2.4.7-p5

Magento Open Source
2.4.7-p4, 2.4.7-p3, 2.4.7-p2, 2.4.7-p1, 2.4.7, 2.4.6-p9, 2.4.6-p8, 2.4.6-p7, 2.4.6-p6, 2.4.5-p11, 2.4.5-p10, 2.4.5-p9, 2.4.5-p8, 2.4.4-p12, 2.4.4-p11, 2.4.4-p10, 2.4.4-p9
Adobe Commerce
2.4.7-p4, 2.4.7-p3, 2.4.7-p2, 2.4.7-p1, 2.4.7, 2.4.6-p9, 2.4.6-p8, 2.4.6-p7, 2.4.6-p6, 2.4.5-p11, 2.4.5-p10, 2.4.5-p9, 2.4.5-p8, 2.4.4-p12, 2.4.4-p11, 2.4.4-p10, 2.4.4-p9
Requires
ACSD-63244
Patch file
patches/os/ACP2E-3838_2.4.7-p3.patch
  • vendor/magento/module-csp/Model/SubresourceIntegrity/SriEnabledActions.php (added)
  • vendor/magento/module-csp/Plugin/AddDefaultPropertiesToGroupPlugin.php
  • vendor/magento/module-csp/etc/di.xml
  • vendor/magento/module-csp/view/frontend/layout/multishipping_checkout.xml (added)

Sources

Łukasz Bajsarowicz
Built by

Łukasz Bajsarowicz, e-commerce architect

Magento and Adobe Commerce architecture, upgrades, performance and audits for merchants and agencies since 2015; magento.watch is the tooling I use on those projects.

Open source, maintained on weekends.