[
https://issues.apache.org/jira/browse/HDDS-15884?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sadanand Shenoy updated HDDS-15884:
-----------------------------------
Description:
Tiny nit pick when I was viewing the blog : The blog page does not render the
profile images correctly. Upon checking the console tab it points to csp
violation. Probably we need to fix the csp conf somewhere in the site to fix
this and accept images from github.com as images are being served from there.
{code:java}
Loading the image 'https://github.com/jojochuang.png' violates the following
Content Security Policy directive: "default-src 'self' data: blob:
'unsafe-inline' 'unsafe-eval' https://www.apachecon.com/
https://www.communityovercode.org/ https://*.apache.org/ https://apache.org/
https://*.scarf.sh/ https://*.algolia.net/ https://*.algolianet.com/
https://*.algolia.io/";. Note that 'img-src' was not explicitly set, so
'default-src' is used as a fallback. The action has been blocked.{code}
was:
Tiny nit pick when I was viewing the blog : The blog page does not render the
profile images correctly. Upon checking the network tab it points to csp
violation. Probably we need to fix the csp conf somewhere in the site to fix
this and accept images from github.com as images are being served from there.
{code:java}
Loading the image 'https://github.com/jojochuang.png' violates the following
Content Security Policy directive: "default-src 'self' data: blob:
'unsafe-inline' 'unsafe-eval' https://www.apachecon.com/
https://www.communityovercode.org/ https://*.apache.org/ https://apache.org/
https://*.scarf.sh/ https://*.algolia.net/ https://*.algolianet.com/
https://*.algolia.io/";. Note that 'img-src' was not explicitly set, so
'default-src' is used as a fallback. The action has been blocked.{code}
> Blog page on website does not render profile images
> ---------------------------------------------------
>
> Key: HDDS-15884
> URL: https://issues.apache.org/jira/browse/HDDS-15884
> Project: Apache Ozone
> Issue Type: Bug
> Components: website
> Reporter: Sadanand Shenoy
> Priority: Major
> Attachments: Screenshot 2026-07-16 at 5.54.40 PM-1.png
>
>
> Tiny nit pick when I was viewing the blog : The blog page does not render the
> profile images correctly. Upon checking the console tab it points to csp
> violation. Probably we need to fix the csp conf somewhere in the site to fix
> this and accept images from github.com as images are being served from there.
> {code:java}
> Loading the image 'https://github.com/jojochuang.png' violates the following
> Content Security Policy directive: "default-src 'self' data: blob:
> 'unsafe-inline' 'unsafe-eval' https://www.apachecon.com/
> https://www.communityovercode.org/ https://*.apache.org/ https://apache.org/
> https://*.scarf.sh/ https://*.algolia.net/ https://*.algolianet.com/
> https://*.algolia.io/";. Note that 'img-src' was not explicitly set, so
> 'default-src' is used as a fallback. The action has been blocked.{code}
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
