Skip to content

Allow fonts to be served from asset host in CSP.#7825

Closed
omnigrok wants to merge 1 commit intodiaspora:developfrom
omnigrok:7796-font-csp
Closed

Allow fonts to be served from asset host in CSP.#7825
omnigrok wants to merge 1 commit intodiaspora:developfrom
omnigrok:7796-font-csp

Conversation

@omnigrok
Copy link
Copy Markdown

Closes #7796.

I bumped into this setting up my pod (where I was brave / foolish and turned on CSP enforcement) and noticed that web fonts were being blocked by CSP. Seems like a simple fix.

@omnigrok
Copy link
Copy Markdown
Author

I'm new here, but I suspect that the CI build failure is unrelated to this change (it's related to the changing post defaults to public and appears to only happen on one of the build variants), and the test coverage decrease looks staggeringly large across a large number of files to have been caused by adding a single line. Let me know if I'm wrong though and I'll dig into it.

@SuperTux88
Copy link
Copy Markdown
Member

Merged as 1b03265

Thanks @omnigrok for your first contribution 🍪 and thanks @jhass for the review 🍪

@SuperTux88 SuperTux88 added this to the 0.7.6.0 milestone Jun 15, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

font_src in Content Security Policy needs to include asset host

3 participants