Limitations

Content Security Policy

Warning

If you have such a Content Security Policy in place: Do NOT remove it.

Tip

Instead simply switch to logging.

kreXX is very reliant on JavaScript. Without it, it would not be able to do its job. The JavaScript itself is outputted inline via <script> tags. And that may be a problem.

A lot of websites have a content security police in place, preventing inline JavaScript from being used. Such a policy is actually a very good idea, because it gives an extra level of security. On the downside it also prevents kreXX on the frontend.

We have done all we could to make kreXX work with such a policy in place, but it is not always possible. A good example is the Aimeos Backend. The CSP policy is hardcoded in the template files, leaving no way to inject the needed JavaScript.

Headers already send

When debugging, you may encounter the error message Headers already send. This means that kreXX has already sent some data to the browser, and TYPO3 is trying to send the header, causing this.

The solution is simple: Try other output methods.

You can change the output methods in the backend settings: Backend settings