CSP error for /manifest.json - Githubissues

SoylentNews / rehash

Forked from Slashcode, rehash is the codebase that powers SoylentNews.org, powered by mod_perl 2

http://soylentnews.org

GNU General Public License v2.0

57 stars 26 forks source link

CSP error for /manifest.json #456

Open bensonmitchell opened 5 years ago

bensonmitchell commented 5 years ago

Steps to reproduce:

Load front page https://soylentnews.org/ in CSP3-supporting browser (Chrome OS, v68.0.3440.118)
Look at Console tab in Dev Tools (or equivalent)

Expected result:

Console displays no errors

Actual result:

Console displays following error: Refused to load manifest from 'https://soylentnews.org/manifest.json' because it violates the following Content Security Policy directive: "default-src 'none'". Note that 'manifest-src' was not explicitly set, so 'default-src' is used as a fallback.

TheMightyBuzzard commented 5 years ago

Appreciate the notification but I looked it up and that's exclusively a webapp thing not a webpage thing. Chrome is made by the yahoos at Google though, so they don't know there's a difference.