cameri / nostream

A Nostr Relay written in TypeScript
MIT License
736 stars 189 forks source link

[BUG] CSP error on terms.html #160

Open mdavids opened 1 year ago

mdavids commented 1 year ago

Describe the bug I visited our server https://nostr.example.nl/terms (not it's real name) and got the terms.html, but is was rather simple. As it turns out there are some Content-Security-Policy issues:

Refused to apply inline style because it violates the following Content Security Policy directive: "style-src 'self' https://cdn.jsdelivr.net/npm/".

To Reproduce Steps to reproduce the behavior:

  1. Visit, with a browser, https://server.domain.tld/terms
  2. Look in the 'developer tools console' of the browser

Expected behavior

No CSP error(s), nicer formatted page.

Screenshots

N/A

System (please complete the following information):

Logs

N/A

Additional context

I'm new to nostream, so I'm not sure where exactly the Content-Security-Header is set and defined. So i'm sorry if I'm signalling the issue at the wrong place.

I followed these steps for installation: https://andreneves.xyz/p/set-up-a-nostr-relay-server-in-under

cameri commented 1 year ago

Thanks for the report!

cameri commented 1 year ago

@mdavids I am unable to reproduce this issue. Are you still having it? If so, can you provide a copy of your settings file and your relay URL?