Document common pitfalls in hosting Riot

element-hq / element-web

A glossy Matrix collaboration client for the web.

https://element.io

GNU Affero General Public License v3.0

11.19k stars 2k forks source link

Document common pitfalls in hosting Riot #3501

Open uhoreg opened 7 years ago

uhoreg commented 7 years ago

such as missing icons when the web server decides to send an X-Frame-Options: DENY header

lampholder commented 7 years ago

I've been meaning to try hosting my own Riot, so I could take a swing at this if I get a spare extra-curricular moment.

If I don't get around tot this it would be great if it could be maintained by the community. Is this best served by being a markdown textfile in the repo or by a community-editable wiki?

MTRNord commented 6 years ago

If you use Content-Policy you need to allow https://scalar.vector.im as frame-src and default-src also you HS Adress as default-src and img-src aswell as adding https//scalar-staging.riot.im to frame-src. Obviously to allow SVG files object-src has to contain 'self'