Skip to content

feat(framework): add ignoreUrlParams configuration option#13518

Merged
ilhan007 merged 7 commits into
mainfrom
feat/ignore-url-params
May 15, 2026
Merged

feat(framework): add ignoreUrlParams configuration option#13518
ilhan007 merged 7 commits into
mainfrom
feat/ignore-url-params

Conversation

@ilhan007
Copy link
Copy Markdown
Contributor

@ilhan007 ilhan007 commented May 14, 2026

Summary

  • Adds ignoreUrlParams: boolean configuration option to disable URL parameter processing
  • When set to true in the data-ui5-config script, all sap-ui-* and sap-* URL parameters are skipped during initialization
  • Defaults to false (fully backward compatible)

Usage

<script data-ui5-config type="application/json">
{
  "ignoreUrlParams": true
}
</script>

Motivation

Production applications (like SFSF) need to eliminate URL parameters as an vulnerability surface.

Test plan

  • Added Cypress tests verifying URL params are ignored when ignoreUrlParams: true
  • All existing ConfigurationURL tests (26/26) pass
  • All existing ConfigurationScript tests (21/21) pass

Fixes #13515

Allow applications to disable URL parameter processing for
production hardening by setting ignoreUrlParams: true in the
data-ui5-config script or via the JS API (setIgnoreUrlParams).

Fixes #13515
@ilhan007 ilhan007 force-pushed the feat/ignore-url-params branch from 00469b3 to d343e4c Compare May 14, 2026 10:33
@ui5-webcomponents-bot
Copy link
Copy Markdown
Collaborator

ui5-webcomponents-bot commented May 14, 2026

🧹 Preview deployment cleaned up: https://pr-13518--ui5-webcomponents.netlify.app

@ui5-webcomponents-bot ui5-webcomponents-bot temporarily deployed to preview May 14, 2026 10:43 Inactive
@ilhan007 ilhan007 requested a review from nnaydenow May 14, 2026 11:26
@ui5-webcomponents-bot ui5-webcomponents-bot temporarily deployed to preview May 14, 2026 11:33 Inactive
@ilhan007 ilhan007 requested a review from vladitasev May 14, 2026 11:49
@ui5-webcomponents-bot ui5-webcomponents-bot temporarily deployed to preview May 14, 2026 11:55 Inactive
@ilhan007 ilhan007 merged commit f09792c into main May 15, 2026
33 of 37 checks passed
@ilhan007 ilhan007 deleted the feat/ignore-url-params branch May 15, 2026 09:56
@ui5-webcomponents-bot ui5-webcomponents-bot temporarily deployed to preview May 15, 2026 09:56 Inactive
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Feature Request]: Configuration to disable/control URL parameter processing for production hardening

3 participants