Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.lang.javascript > #38992
| From | doctor@doctor.nl2k.ab.ca (The Doctor) |
|---|---|
| Newsgroups | comp.lang.javascript |
| Subject | Re: Chrome and passing on cross-origin |
| Date | 2020-10-18 22:15 +0000 |
| Organization | NetKnow News |
| Message-ID | <rmiepd$2io6$44@gallifrey.nk.ca> (permalink) |
| References | <rmdmmp$2c5l$3@gallifrey.nk.ca> <2924c70d-67bd-468a-a480-bd1741bb1158n@googlegroups.com> <rmhctg$qg5$5@gallifrey.nk.ca> <a902d526-d770-4555-860b-fc8634326e25n@googlegroups.com> |
In article <a902d526-d770-4555-860b-fc8634326e25n@googlegroups.com>, Michael Haufe (TNO) <tno@thenewobjective.com> wrote: >On Sunday, October 18, 2020 at 7:37:13 AM UTC-5, The Doctor wrote: >> In article <2924c70d-67bd-468a...@googlegroups.com>, >> Michael Haufe (TNO) <t...@thenewobjective.com> wrote: >> >On Saturday, October 17, 2020 at 5:27:21 PM UTC-5, The Doctor wrote: >> > >> >> Some good hints but no dice on the page yet. >> > >> >What does that mean? Are you getting a warning? >> According to one programmer they are getting error 500. >> >> I am using nginx >> >> here are to lines in the configuration >> >> #add_header Content-Security-Policy "default-src 'self'; script-src >'self' https://ssl.google-analytics.com https://assets.zendesk.com >https://connect.facebook.net; img-src 'self' >https://ssl.google-analytics.com https://s-static.ak.facebook.com >https://assets.zendesk.com; style-src 'self' >https://fonts.googleapis.com https://assets.zendesk.com; font-src 'self' >https://themes.googleusercontent.com; frame-src >https://assets.zendesk.com https://www.facebook.com >https://s-static.ak.facebook.com https://tautt.zendesk.com; object-src >'none'"; >> ##add_header Referrer-Policy "strict-origin-when-cross-origin"; >> >> These are commented out for a reason. >> >> Here is the page in question > >> [... ] > >> All right in Chrone, Edge and AVG SEcure browser this fails to work. >> >> In Firefox, Waterfox, SeaMonkey, Opera and other similar browsers >> >> if the nginx.conf lines I comment above are turn off, the page >> fails like it does in Chrome, but when I turn comment the >> mention configuration line, Firefox et al works, and Mozilla observer >> is not happy. >> >> I need to get this solved like yesterday! > >I found the url of the page in question and am not seeing an error >currently (besides a 404 error on a stylesheet). > ><https://www.nk.ca/pdsolutions/indexnongst.html> > >I see in your commented content security policy the following: > >``` >script-src 'self' https://ssl.google-analytics.com >https://assets.zendesk.com https://connect.facebook.net; >``` >In your original post you referenced the following script: > >``` ><script >src="https://code.jquery.com/jquery-3.3.1.js" >integrity="sha256-2Kok7MbOyxpgUVvAk/HJ2jigOSYS2auK4Pfzbm7uH60=" >crossorigin="anonymous"></script> ><script> >``` > >Notice you're missing <https://code.jquery.com> in your Content Security Policy > ><https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/script-src> > >By including that domain you should be able to load the expected script. Tried that no dice! IS the referrer-policy interfering? -- Member - Liberal International This is doctor@@nl2k.ab.ca Ici doctor@@nl2k.ab.ca Yahweh, Queen & country!Never Satan President Republic!Beware AntiChrist rising! Look at Psalms 14 and 53 on Atheism https://www.empire.kred/ROOTNK?t=94a1f39b BC save the Province; on 24 October 2020, vote Liberal and not NDP!
Back to comp.lang.javascript | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Chrome and passing on cross-origin doctor@doctor.nl2k.ab.ca (The Doctor) - 2020-10-17 02:59 +0000
Re: Chrome and passing on cross-origin "Michael Haufe (TNO)" <tno@thenewobjective.com> - 2020-10-16 21:45 -0700
Re: Chrome and passing on cross-origin "Evertjan." <exxjxw.hannivoort@inter.nl.net> - 2020-10-17 11:00 +0200
Re: Chrome and passing on cross-origin doctor@doctor.nl2k.ab.ca (The Doctor) - 2020-10-17 13:24 +0000
Re: Chrome and passing on cross-origin doctor@doctor.nl2k.ab.ca (The Doctor) - 2020-10-17 22:27 +0000
Re: Chrome and passing on cross-origin "Michael Haufe (TNO)" <tno@thenewobjective.com> - 2020-10-17 17:30 -0700
Re: Chrome and passing on cross-origin "J.O. Aho" <user@example.net> - 2020-10-18 16:14 +0200
Re: Chrome and passing on cross-origin "Michael Haufe (TNO)" <tno@thenewobjective.com> - 2020-10-18 10:17 -0700
Re: Chrome and passing on cross-origin doctor@doctor.nl2k.ab.ca (The Doctor) - 2020-10-18 22:15 +0000
Re: Chrome and passing on cross-origin "Michael Haufe (TNO)" <tno@thenewobjective.com> - 2020-10-18 15:31 -0700
Re: Chrome and passing on cross-origin doctor@doctor.nl2k.ab.ca (The Doctor) - 2020-10-19 00:54 +0000
Re: Chrome and passing on cross-origin "Michael Haufe (TNO)" <tno@thenewobjective.com> - 2020-10-18 18:51 -0700
Re: Chrome and passing on cross-origin doctor@doctor.nl2k.ab.ca (The Doctor) - 2020-10-19 02:43 +0000
Re: Chrome and passing on cross-origin "Michael Haufe (TNO)" <tno@thenewobjective.com> - 2020-10-18 19:48 -0700
Re: Chrome and passing on cross-origin doctor@doctor.nl2k.ab.ca (The Doctor) - 2020-10-19 21:58 +0000
Re: Chrome and passing on cross-origin "Michael Haufe (TNO)" <tno@thenewobjective.com> - 2020-10-19 21:11 -0700
Re: Chrome and passing on cross-origin doctor@doctor.nl2k.ab.ca (The Doctor) - 2020-10-20 05:04 +0000
Re: Chrome and passing on cross-origin doctor@doctor.nl2k.ab.ca (The Doctor) - 2020-10-20 13:14 +0000
Re: Chrome and passing on cross-origin "Michael Haufe (TNO)" <tno@thenewobjective.com> - 2020-10-20 09:47 -0700
Re: Chrome and passing on cross-origin doctor@doctor.nl2k.ab.ca (The Doctor) - 2020-10-21 13:59 +0000
Re: Chrome and passing on cross-origin doctor@doctor.nl2k.ab.ca (The Doctor) - 2020-10-22 13:41 +0000
Re: Chrome and passing on cross-origin "Michael Haufe (TNO)" <tno@thenewobjective.com> - 2020-10-22 11:46 -0700
Re: Chrome and passing on cross-origin doctor@doctor.nl2k.ab.ca (The Doctor) - 2020-10-22 22:36 +0000
Re: Chrome and passing on cross-origin doctor@doctor.nl2k.ab.ca (The Doctor) - 2020-10-24 02:42 +0000
Re: Chrome and passing on cross-origin "Michael Haufe (TNO)" <tno@thenewobjective.com> - 2020-10-24 14:47 -0700
Re: Chrome and passing on cross-origin "Evertjan." <exxjxw.hannivoort@inter.nl.net> - 2020-10-25 00:05 +0200
Re: Chrome and passing on cross-origin "Michael Haufe (TNO)" <tno@thenewobjective.com> - 2020-10-24 15:24 -0700
Re: Chrome and passing on cross-origin "Evertjan." <exxjxw.hannivoort@inter.nl.net> - 2020-10-25 00:53 +0200
Re: Chrome and passing on cross-origin doctor@doctor.nl2k.ab.ca (The Doctor) - 2020-10-24 23:42 +0000
Re: Chrome and passing on cross-origin "Michael Haufe (TNO)" <tno@thenewobjective.com> - 2020-10-24 21:19 -0700
Re: Chrome and passing on cross-origin "Evertjan." <exxjxw.hannivoort@inter.nl.net> - 2020-10-25 15:33 +0100
Re: Chrome and passing on cross-origin doctor@doctor.nl2k.ab.ca (The Doctor) - 2020-10-25 18:49 +0000
Re: Chrome and passing on cross-origin "Michael Haufe (TNO)" <tno@thenewobjective.com> - 2020-10-25 12:04 -0700
Re: Chrome and passing on cross-origin "Evertjan." <exxjxw.hannivoort@inter.nl.net> - 2020-10-26 00:31 +0100
Re: Chrome and passing on cross-origin doctor@doctor.nl2k.ab.ca (The Doctor) - 2020-10-26 00:44 +0000
Re: Chrome and passing on cross-origin "Michael Haufe (TNO)" <tno@thenewobjective.com> - 2020-10-20 09:47 -0700
csiph-web