MarcusSorealheis edited a comment on pull request #42:
URL: https://github.com/apache/solr/pull/42#issuecomment-853527455


   there's also a few security exceptions that if thrown in the wrong corporate 
org could start problematic conversations running SOLR. Everything is under 
scrutiny right now given the recent events.
   
   To fix those errors referencing image resources being blocked by the CSP, we 
need to add this clause to `jetty.xml`: `img-src 'self' data:`. The change will 
still restrict img resources to the host but it will allow SVG and IMG. We 
cannot be more specific because of the port. :) It is a replacement of the 
existing `img-srv 'self'`.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@solr.apache.org
For additional commands, e-mail: issues-h...@solr.apache.org

Reply via email to