Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Strange request to example.com causing CSP error (v1.6 and up) #178

Closed
omaralqady opened this issue Jan 6, 2017 · 2 comments
Closed

Strange request to example.com causing CSP error (v1.6 and up) #178

omaralqady opened this issue Jan 6, 2017 · 2 comments

Comments

@omaralqady
Copy link

This doesn't occur in v1.5.x, and occurs in v.1.6.x and v.1.7.x.

When using ReDoc with content security policy enabled, and the connect sources set to accept certain sources, an error occurs because of a request by ReDoc to example.com

Error:

Refused to connect to 'https://example.com/' because it violates the following Content Security Policy directive: "connect-src 'self' ws: wss:".

This doesn't seem to be something that is required for the functionality of ReDoc, but the prevention of loading this by CSP triggers an exception and results in a blank page

Error screenshot:
redoc-err

@RomanHotsiy
Copy link
Member

This is an issue of stream-http. I've opened corresponding issue there: jhiesey/stream-http#64

@RomanHotsiy RomanHotsiy added the wip label Jan 9, 2017
@RomanHotsiy
Copy link
Member

@omaralqady should be fixed on the latest 1.8.0 version
Verify please if this is fixed and reopen the issue if it's not

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants