nftstorage / nftstorage.link

🪐 NFT.Storage Gateway, the IPFS gateway for NFT.Storage is not "another gateway", but a caching layer for NFTs that sits on top of existing IPFS public gateways. ***Notice: Uploads have been decommissioned.**** Learn more and find a new hot storage provider for uploading new assets: nft.storage/nft-storage-classic
https://nft.storage/nft-storage-classic
Other
46 stars 10 forks source link

Regression: CSP change breaks local JS loading #182

Closed ikreymer closed 1 year ago

ikreymer commented 1 year ago

The change in #176 ends up breaking loading of local JS.

The CSP was changed to contain:

connect-src https://polygon-rpc.com https://rpc.testnet.fantom.network

but it should include self:

connect-src 'self' https://polygon-rpc.com https://rpc.testnet.fantom.network

Otherwise, all local scripts within CID are broken, as per: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/connect-src

ikreymer commented 1 year ago

Fixed via #183