Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Content-Security-Policy: allow images from data: URLs #772

Merged
merged 1 commit into from
Nov 11, 2024

Conversation

alxndrsn
Copy link
Contributor

@alxndrsn alxndrsn commented Nov 9, 2024

QR displayed in odk-central-frontend are displayed with src=data:...

Closes #629

QR displayed in odk-central-frontend are displayed with src=data:...

Closes getodk#629
@matthew-white
Copy link
Member

Tagging @lognaturel, since I think she reviewed the original CSP.

Copy link
Member

@lognaturel lognaturel left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We need * for arbitrary images embedded in markdown descriptions and data for the QR codes.

@lognaturel lognaturel changed the base branch from master to next November 11, 2024 17:07
@lognaturel
Copy link
Member

Changed the base to next. @alxndrsn could you please keep the PR checklist that has a reminder about target branch?

@alxndrsn
Copy link
Contributor Author

We need * for arbitrary images embedded in markdown descriptions and data for the QR codes.

I think it would be helpful to add this as a comment, but commenting every one of these rules would get out of hand quite quickly 🤔

@alxndrsn alxndrsn merged commit fb02423 into getodk:next Nov 11, 2024
2 checks passed
@alxndrsn alxndrsn deleted the data-images branch November 11, 2024 17:11
@lognaturel
Copy link
Member

I think what you've done with the commit message is great! If we have questions we can use git to see what was going on.

I always try to leave a note of what I think about when I do a review also for archaeology purposes.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

App user QR code violates CSP directive
3 participants