search

github / secure_headers

Manages application of security headers with many safe defaults
MIT License
3.16k stars 252 forks source link

Morris #233

Closed dcalixto closed 8 years ago

dcalixto commented 8 years ago

After installed secureheaders, Morris: github.com/morrisjs/morris.js/ did not show the graphics anymore. someone is having the same issue?

oreoshake commented 8 years ago

The images look fine to me. Also, installing secure_headers would have no effect on your browser.

oreoshake commented 8 years ago

Oh, I'm guessing you mean have a site using morris and secure_headers. The point of CSP is to restrict resource loads, and the default policy is quite strict. What errors show up in the developer console?

dcalixto commented 8 years ago

@oreoshake that's the point show no errors on console.

dcalixto commented 8 years ago

but on firebug related with morris, ajaxSettings

Object { url="http://localhost:3000/website/test/views",  type="GET",  isLocal=false,  more...}

accepts

Object { *="*/*",  text="text/plain",  html="text/html",  more...}

async

true

contentType

"application/x-www-form-urlencoded; charset=UTF-8"
oreoshake commented 8 years ago

@dcalixto I cannot help you diagnose the problem without the errors in the console, in order to get rid of them. What you've posted does not help at all.

oreoshake commented 8 years ago

I see you've moved your question to stack overflow rather than provide the requested details so I'm going to close this out.