YunoHost-Apps / kanboard_ynh

Kanboard package for YunoHost
http://kanboard.net
GNU Affero General Public License v3.0
14 stars 16 forks source link

Add the "flying button" return to yunohost main page #10

Closed Jibec closed 9 years ago

Jibec commented 9 years ago

May you add the return button to YNH main page ? You can see this button on other official app like TTRSS

mbugeia commented 9 years ago

That's a bug, the javascript code for the panel is loaded but not executed because of the Content Security Policy header sent by Kanboard.

Error message: Refused to evaluate a string as JavaScript because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive: "default-src 'self'". Note that 'script-src' was not explicitly set, so 'default-src' is used as a fallback. domReady @ ynhpanel.js:173

This can be avoided by patching this line of kanboard source file: https://github.com/fguillot/kanboard/blob/9c9ed02cd7ebc5dbbc99bcaed6f80988ce8a9677/app/Core/Response.php#L219 to $policies['default-src'] = "'self' 'unsafe-eval' data:";

But even after that, we can see the button but it doesn't work...

mbugeia commented 9 years ago

Fixed in the last commit

Jibec commented 9 years ago

it works fine, thank you !