hoaproject/W3

community page issue with avatar of contributor

Grummfy opened this issue · 3 comments

Error from Chrome 59 console:

Refused to load the image 'https://github.com/Hywan.png?size=60' because it violates the following Content Security Policy directive: "default-src 'self' *.hoa-project.net *.hoa.io *.github.io *.github.com *.discourse.org *.tile.openstreetmap.org 'unsafe-inline' 'unsafe-eval'". Note that 'img-src' was not explicitly set, so 'default-src' is used as a fallback.
…

It appear that github.com isn't allowed (without a sub-domain) by the header security rule : Content-Security-Policy:default-src 'self' *.hoa-project.net *.hoa.io *.github.io *.github.com *.discourse.org *.tile.openstreetmap.org 'unsafe-inline' 'unsafe-eval';.

Maybe @Pierozi or @Hywan can confirm my idea ?

Hywan commented

Fixed! Thanks for the report!

Hywan commented

And @Metalaka was correct 👍.