Including ‘…/layout.css’ with content type HTML into incompatible type HTML/CSS

Hi,

I made last attempt to find a solution by myself and this works:

<style>
    {php readfile($wwwDir.'/css/layout.css')}
</style>

It looks like php include is completely disabled in latte in the tag {php …} but the error message isn´t sufficiently clear (see in my previous post). If it is so, than I propose to make the error message from latte more clear and It would be also useful make some comment in latte documentation about how include css file.

Last edited by m.brecher (2023-01-12 02:52)

<style type="text/css">
   @import url({$wwwDir}+"/css/layout.css");
</style>

@nightfish

Your code contains $wwwDir, but the exception message mentions $appDir

Of course, you are right, I have simplified the code for posting on forum here, the code contains also $appDir but in more complicated code, but this is not the case.

Now it looks like, that latte doesnt allowe any potentially dangerous php functions like echo, include, … and readfile looks to be considered as safe ;).

Last edited by m.brecher (2023-01-12 14:02)

m.brecher wrote:
Now it looks like, that latte doesnt allowe any potentially dangerous php functions like echo, include, … and readfile looks to be considered as safe ;).

That was the main idea of my previous message – that echo, include etc. are not functions, but rather language constructs. And that it is quite possible that Latte does not support language constructs because of their syntactical differences, not because of safety reasons.

<style>
	{include $wwwDir.'/css/layout.css'}
</style>

This looks like something that could be supported and no one yet just considered such use case. Latte 3 needs most things to be explicitly allowed to work

<style>
	{php include $wwwDir.'/css/layout.css'}
</style>

This works only with RawPhpExtension enabled. Include is a language construct which is not supported by Latte's PHP dialect and you would need that dialect to be replaced by raw PHP.

$this->template->getLatte()->addExtension(new \Latte\Essential\RawPhpExtension());

<style type="text/css">
   @import url({$wwwDir}+"/css/layout.css");
</style>

How is that helpful? Still an external file, just different syntax

Last edited by Marek Bartoš (2023-01-12 14:29)

Marek Bartoš wrote:

<style type="text/css">
   @import url({$wwwDir}+"/css/layout.css");
</style>

How is that helpful? Still an external file, just different syntax

But you avoid compilation and latte processing, which you don't need anyway with .css file.

mystik wrote:

@KamilValenta But it is basically just more complicated version of

<link rel="stylesheet" href="{$wwwDir}/css/layout.css">

No, <link rel…> is valid tag in head, but @mbrecher required to write style in body tag.
Would this make sense then? “I want to have the possibility to change easily including css via <link …>”?

Last edited by Kamil Valenta (2023-01-12 20:15)

	<style>
		{include $wwwDir.'/css/layout.css'}
	</style>

This is little surprising behaviour – the file layout.css isn´t of type html – its clearly identifiable from file extension and also from the content of the file that it is css.

{include} is used purely to loads templates written in Latte or blocks and does not take into account file extension. It's written in the documentation this way https://latte.nette.org/en/tags#…

     .....
    <style>
        <?php include $wwwDir.'/css/layout.css' ?>
    </style>
     .....

Exist some equivalent in Latte for something like this above ??

The include in PHP works the same way as {include} in Latte – it is used to load PHP scripts and does not take into account the extension. Loading CSS with it is a mistake. If the file contained <? characters, it would break it.

<style>
    {php readfile($wwwDir.'/css/layout.css')}
</style>

Yeah, that's the correct way. So there is one security risk (CSS file must not contain </style), which Latte does not address at the moment, but is going to in the next version.

@KamilValenta

but @mbrecher required to write style in body tag

Sorry Kamil for may be not clear formulation. I didn´t think about writing css code into html tag body but into output html code directly not via <link> tag – of course into html tag head – something like this:

<head>
   <style>
      ... direct css code ...
   </style>
...
</head>

I agree with @MarekBartoš and @mystik that @import is more or less the same as <link>.