README

Welcome to the island. The sun is shining, the drinks are cold, and your Alpine components are throwing CSP errors.

Don't worry — by the time you leave, you'll know exactly why that happens and how to fix it. This workshop will take you from "what even is CSP?" to confidently migrating real Hyva code to strict Content Security Policy compliance.

What's in the box

This metapackage installs everything you need for the workshop:

Package	What it does
`magento2-paradise-csp-workshop-frontend`	A learning hub with intentionally broken CSP code to fix
`magento2-paradise-csp-workshop-checkout`	A custom checkout payment method — also intentionally broken
`hyva-themes/magento2-default-theme`	The Hyva default theme
`hyva-themes/magento2-default-theme-csp`	The CSP-compliant Hyva theme layer

Installation

composer require friends-of-hyva/magento2-paradise-csp-workshop-meta
bin/magento setup:upgrade --keep-generated

That's it. Both workshop modules will be active and ready for you to break — er, fix.

Hyva theme license

The Hyva default theme and CSP theme layer require a Hyva license to install. A free license is available at hyva.io/hyva-theme-license.html — register with your email address and follow the instructions to receive one right away.

The Hyva Checkout package requires a paid Hyva Checkout license. If you have one, the package is available through the Hyva Composer repository using the same credentials.

If the package isn't on Packagist yet

If composer require can't find the package, add the GitHub repositories manually to your project's composer.json.

Add all three to the repositories section:

{
    "repositories": [
        {
            "type": "vcs",
            "url": "https://github.com/friends-of-hyva/magento2-paradise-csp-workshop-meta"
        },
        {
            "type": "vcs",
            "url": "https://github.com/friends-of-hyva/magento2-paradise-csp-workshop-frontend"
        },
        {
            "type": "vcs",
            "url": "https://github.com/friends-of-hyva/magento2-paradise-csp-workshop-checkout"
        }
    ]
}

Then run:

composer require friends-of-hyva/magento2-paradise-csp-workshop-meta
bin/magento setup:upgrade --keep-generated

Where to start

Read the Study Guide first. It explains what you'll learn, how the workshop is structured, and which path to take depending on your goals.

The migration tool

A copy of hyva-csp-helper.php is included in tools/. It can automatically migrate the most common CSP patterns in any Hyva module. Full documentation at:

The tool handles about 90% of real-world cases. The remaining 10% is where the learning happens — and this workshop is designed to take you through exactly that.

License

Open Software License ("OSL") v. 3.0

friends-of-hyva / magento2-paradise-csp-workshop-meta

Maintainers

Package info

Statistics

Security