search

Synzvato / decentraleyes

This repository has a new home: https://git.synz.io/Synzvato/decentraleyes
Mozilla Public License 2.0
1.45k stars 108 forks source link

Decentraleyes breaks Datawrapper's blog #252

Closed kannes closed 6 years ago

kannes commented 6 years ago

https://blog.datawrapper.de/colorblind-check/ fails to load an embedded map due to 'None of the “sha384” hashes in the integrity attribute match the content of the subresource.'

If I disable decentraleyes it loads fine.

I think this is the problematic bit: <script src="https://ajax.googleapis.com/ajax/libs/jquery/2.1.4/jquery.min.js" integrity="sha384-8gBf6Y4YYq7Jx97PIqmTwLPin4hxIzQw5aDmUg/DDhul9fFpbbLcLh3nTIIDJKhx" crossorigin="anonymous"></script>

Synzvato commented 6 years ago

Hi @kannes, and many thanks for this detailed report of your findings.

This is a known issue (see #16). The website's security settings keep Decentraleyes from injecting any libraries into that page. For now, adding blog.datawrapper.de to your domain whitelist should solve your problem. A permanent solution is currently being discussed. Please do let me know if this helps!