thelabdude commented on pull request #42: URL: https://github.com/apache/solr/pull/42#issuecomment-853964812
> there's also a few security exceptions that if thrown in the wrong corporate org could start problematic conversations running SOLR. Everything is under scrutiny right now given the recent events. > > To fix those errors referencing image resources being blocked by the CSP, we need to add this clause to `jetty.xml`: `img-src 'self' data:`. The change will still restrict img resources to the host but it will allow SVG and IMG. We cannot be more specific because of the port. :) It is a replacement of the existing `img-srv 'self'`. This doesn't sound like it is Schema Designer UI specific. I believe I'm referencing icons the same way all the other screens do. If you think this is a Schema Designer specific issue, please provide a link to the offending code. Otherwise, please open another JIRA to address that problem independently of this issue. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: us...@infra.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: issues-unsubscr...@solr.apache.org For additional commands, e-mail: issues-h...@solr.apache.org
