QUALITY PATCH

MDVA-31307: There are Out of memory errors on certain categories due to problems with dynamic CSP…

There are Out of memory errors on certain categories due to problems with dynamic CSP whitelisting for cached blocks. Quality patch MDVA-31307 for magento/module-csp applies to Magento Open Source and Adobe Commerce 2.4.0 to 2.4.1-p1.

Categories
Performance
Components
magento/module-csp
Origin
adobe-commerce-support

No Adobe documentation page exists for this patch.

Install

Install the Quality Patches Tool with composer require magento/quality-patches, apply the prerequisites listed for all files applicable to your distribution and version first, then run vendor/bin/magento-patches apply MDVA-31307. On Cloud, add MDVA-31307 under stage.build.QUALITY_PATCHES in .magento.env.yaml.

For cweagans/composer-patches, choose a compatible version below and download the bundle. Copy its MDVA-31307/ folder into patches/composer/, merge composer.patches.json into composer.json, then run composer install. Bundle prerequisites the same way and list them first. Paths are relative to each package root, using the default -p1 level. Prefer local files when configuring composer-patches; a remote URL can change.

Patch files and compatible versions

Packages across compatible versions (1): magento/module-csp
Packages across compatible versions (1): magento/module-csp

magento/magento2-base >=2.4.0 <2.4.2

Magento Open Source
2.4.1-p1, 2.4.1, 2.4.0-p1, 2.4.0
Adobe Commerce
2.4.1-p1, 2.4.1, 2.4.0-p1, 2.4.0
Patch file
patches/os/MDVA-31307_2.4.0.patch
  • vendor/magento/module-csp/Model/BlockCache.php
  • vendor/magento/module-csp/Model/Collector/CompositeMerger.php (added)
  • vendor/magento/module-csp/Model/Collector/DynamicCollector.php
  • vendor/magento/module-csp/etc/di.xml

Sources

Łukasz Bajsarowicz
Built by

Łukasz Bajsarowicz, e-commerce architect

Magento and Adobe Commerce architecture, upgrades, performance and audits for merchants and agencies since 2015; magento.watch is the tooling I use on those projects.

Open source, maintained on weekends.