Content Security Policy on statistics JSON blocks favicon.ico - Githubissues

mozilla / addons

☂ Umbrella repository for Mozilla Addons ✨

Other

125 stars 41 forks source link

Content Security Policy on statistics JSON blocks favicon.ico #1928

Open erosman opened 1 year ago

erosman commented 1 year ago

Describe the problem and steps to reproduce it:

Minor issue with CSP resulting in missing favicon & an error logged to the console

Go to any addon's stats e.g. https://addons.mozilla.org/.../statistics/usage/applications/?last=30
Click on JSON in Export: CSV · JSON
No favicon on the new page
Open Developer Tools (F12)
View Console Tab

Content Security Policy: The page’s settings blocked the loading of a resource at https://addons.mozilla.org/favicon.ico (“default-src”).
View Inspector Tab

<meta http-equiv="Content-Security-Policy" content="default-src 'none' ; script-src resource:; ">

What happened?

Favicon not loaded
Error logged

What did you expect to happen?

No error

Anything else we should know?

n/a

┆Issue is synchronized with this Jira Task

KevinMind commented 4 months ago

Old Jira Ticket: https://mozilla-hub.atlassian.net/browse/ADDSRV-329