Allow more image hosts in the custom CSS content security policy

(#909) Feature Under consideration theming

7mo agoby RexSystem edited originally by @icicle1133 on GitHub

Thread

RexSystem 1 vote 7mo ago originally by @nesges on GitHub 1 reply

I get that it's inconvinient, but CSP is way to important to deactivate it for arbitrary websites, not in control of fluxer

Permalink

RexSystem 1 vote 6mo ago originally by @retcinder on GitHub

What if there were uploads/assets associated with themes? Allowing the user to add their own CSP domains is a very band-aid fix. Current solutions are to either convert everything to data: URIs or upload your files to Fluxer itself via a dump server or Personal Notes, as the CSP policy allows the uploaded-files server.

This does sound like an interesting solution but I personally think CSP domain adding would be better.

Permalink

Report a bug Request a feature

Status: Under consideration
Type: Feature
Tags: theming
Votes: 4 +4 from GitHub
Source: fluxerapp/fluxer#301

Moderation history 8

Rex edited #909
- Changed: Description
Reason: Removed empty sections and checklists left over from the GitHub issue form. The text written by the author is unchanged.
1d ago
Rex edited #909
- Title changed from Allow different urls to prevent csp errors with theming to Allow more image hosts in the custom CSS content security policy
Reason: The old title was vague. The request is to allow more hosts such as Giphy, GitHub and Codeberg for theme images.
1d ago
Rex folded #159 Allow different urls to prevent csp errors with theming into #909 Allow more image hosts in the custom CSS content security policy as the same thread
Reason: This is the same GitHub thread as #909. GitHub converted the issue into a discussion and both copies were imported, so they are shown as one thread.
1d ago
Rex edited a comment on #909
Reason: Changed GitHub profile links in mentions into plain names or profiles here.
1d ago
Rex edited a comment on #909
Reason: Changed GitHub profile links in mentions into plain names or profiles here.
1d ago
Rex edited a comment on #909
Reason: Changed GitHub profile links in mentions into plain names or profiles here.
1d ago
Rex edited a comment on #909
Reason: Changed GitHub profile links in mentions into plain names or profiles here.
1d ago
Rex merged #159 Allow different urls to prevent csp errors with theming into #909 Allow more image hosts in the custom CSS content security policy
Reason: Merged because GitHub converted issue #245 into discussion #301 and both copies were imported.
1d ago