Investigate violations of Content-Security-Policy

st-tu-dresden / inloop

[Deprecated] A simple web application to manage online programming assignments

GNU General Public License v3.0

29 stars 8 forks source link

Investigate violations of Content-Security-Policy #429

Closed martinmo closed 3 years ago

martinmo commented 3 years ago

On Windows 10 and Firefox 85, there seems to be a violation of the CSP wrt data: which is shown in the developer console. On macOS with Firefox 85 I cannot reproduce this issue, it might be something related to fonts.

martinmo commented 3 years ago

Further investigation has shown that some browser extension (e.g. Grammarly) tries to load fonts from fonts.gstatic.com which is forbidden by our CSP. This is intentional. Thus, I'm closing this issue.