libravatar-fans team mailing list archive

[Michael Watters <wattersm@xxxxxxxxxx>]

Hello,

Yes, consider it solved.  It's not really an issue with libravatar
itself and I don't believe there's anything you can do server side since
the CSP headers are set by the application being used.


On 9/27/19 11:04 AM, Oliver Falk wrote:
> Hi!
> Sorry for not responding earlier.
> Can I consider this solved?
> Is this something we should point out in the docs somehow/-where?
>
> Oliver
>
> Michael Watters <wattersm@xxxxxxxxxx <mailto:wattersm@xxxxxxxxxx>>
> schrieb am Fr. 27. Sep. 2019 um 16:03:
>
>     I'm not sure there is anything you can do, the CSP headers are
>     created by the application which wasn't setting them correctly in
>     this case.  I was able to get images loading by adding the
>     following CSP headers to the pagure configuration file.
>
>     CSP_HEADERS = (
>         "default-src 'self' https:; " "script-src 'self' 'nonce-{nonce}'; " "style-src 'self' 'nonce-{nonce}';" "img-src 'self' https:; "
>     )
>
>     On 9/27/19 9:55 AM, clime wrote:
>>     Thanks Michael. I will look what we can do on our side.
>>
>>     On Fri, Sep 27, 2019, 3:41 PM Michael Watters
>>     <wattersm@xxxxxxxxxx <mailto:wattersm@xxxxxxxxxx>> wrote:
>>
>>         I found the problem, it appears that Chrome is refusing to
>>         load the image.
>>
>>         Refused to load the image
>>         'https://seccdn.libravatar.org/avatar/7fe4cb31868f324cf91dd5acabfabe3a104a67bf8483d89c0ed5dc7b2349a0e2?s=24&d=retro'
>>         because it violates the following Content Security Policy
>>         directive: "default-src 'self'". Note that 'img-src' was not
>>         explicitly set, so 'default-src' is used as a fallback.
>>
>>
>>         On 9/27/19 9:36 AM, Michael Watters wrote:
>>>         I've noticed an issue with avatar images not loading in pagure, for
>>>         example see the attached screenshot.
>>>
>>>         Does anybody know what would cause this?  The image URL is correct and I
>>>         can open the image without any issues in a separate tab.
>>>
>>>
>>>
>>>         _______________________________________________
>>>         Mailing list: https://launchpad.net/~libravatar-fans
>>>         Post to     : libravatar-fans@xxxxxxxxxxxxxxxxxxx <mailto:libravatar-fans@xxxxxxxxxxxxxxxxxxx>
>>>         Unsubscribe : https://launchpad.net/~libravatar-fans
>>>         More help   : https://help.launchpad.net/ListHelp
>>         _______________________________________________
>>         Mailing list: https://launchpad.net/~libravatar-fans
>>         Post to     : libravatar-fans@xxxxxxxxxxxxxxxxxxx
>>         <mailto:libravatar-fans@xxxxxxxxxxxxxxxxxxx>
>>         Unsubscribe : https://launchpad.net/~libravatar-fans
>>         More help   : https://help.launchpad.net/ListHelp
>>
>     _______________________________________________
>     Mailing list: https://launchpad.net/~libravatar-fans
>     Post to     : libravatar-fans@xxxxxxxxxxxxxxxxxxx
>     <mailto:libravatar-fans@xxxxxxxxxxxxxxxxxxx>
>     Unsubscribe : https://launchpad.net/~libravatar-fans
>     More help   : https://help.launchpad.net/ListHelp
>