The recommendation_url field contains http urls. It should be https urls, otherwise it forces to add a new CSP exception in the manifest while there is no good reason (especially given the time was spent to have proper HTTPS support even in staging :-p).
This is a block for https://github.com/insitu-project/proto-ext/pull/59 (it could be unblocked by changing the CSP but a backend change would be more appropriate)
Currently, https://preprod-lmem-craft-backend.cleverapps.io/api/v1/matchingcontexts returns :
The
recommendation_url
field containshttp
urls. It should behttps
urls, otherwise it forces to add a new CSP exception in the manifest while there is no good reason (especially given the time was spent to have proper HTTPS support even in staging :-p). This is a block for https://github.com/insitu-project/proto-ext/pull/59 (it could be unblocked by changing the CSP but a backend change would be more appropriate)