Giter VIP home page Giter VIP logo

Comments (7)

geeknoid avatar geeknoid commented on September 1, 2024

Is this fixed now?

from istio.io.

esnible avatar esnible commented on September 1, 2024

I had not tried with Chrome before. I tried today and only got one security error from Chrome:

Refused to load the image 'https://istio.io/favicon.ico' because it violates the following Content Security Policy directive: "img-src data:".

I also found 10 broken links; I don't know if you want these here or in another Issue.
https://istio.io/docs/tasks/tbd.html
https://istio.io/docs/concepts/$/img/arch.svg
https://istio.io/favicons/android-chrome-192x192.png
https://istio.io/docs/tutorials/TBD.html
https://istio.io/docs/reference/attributes.html
https://istio.io/docs/concepts/attributes.md
https://istio.io/docs/concepts/TBD.html
https://istio.io/docs/tasks/...
https://istio.io/docs/samples/istio.VERSION
https://istio.io/docs/reference/attributes.md

from istio.io.

davetropeano avatar davetropeano commented on September 1, 2024

^^^ re: violating the img-src: data policy

The content security policy needs to be updated. Add to the header:

Content-Security-Policy: allow 'self'; img-src data: <<INSERT DOMAIN NAME>>

from istio.io.

geeknoid avatar geeknoid commented on September 1, 2024

Dave, where would I insert such a header?

from istio.io.

geeknoid avatar geeknoid commented on September 1, 2024

I fixed the fixable broken links. A couple of them are part of example URLs, so they are intentionally broken.

from istio.io.

davetropeano avatar davetropeano commented on September 1, 2024

@geeknoid I think it goes in _layouts/base.html as a meta tag.

See http://qszhuan.github.io/technology/2015/08/12/add_csp_to_github_blog

from istio.io.

rshriram avatar rshriram commented on September 1, 2024

I think this bug is no longer valid. Chrome does not report unsafe scripts anymore!

from istio.io.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.