Re: [Cloud] Need help with selectize.js

Unless something has changed, Wmflabs policy requires that we only use Wikimedia CDNs. Other CDNs use cookies to track a user's actions, which violates the privacy policy. Magog On Wed, Jun 24, 2020 at 3:41 PM Roy Smith wrote: > OK, I got this solved. Turns out I had a bug in my django

Re: [Cloud] Need help with selectize.js

Honestly, I don't see any downsides to just keeping the attributes. Integrity validation is a valid defense and if it's blocked for some reason that should be fixed on our side. YiFei Zhu On Wed, Jun 24, 2020, 10:11 MusikAnimal wrote: > I wouldn't think you'd need any additional attributes.

Re: [Cloud] Need help with selectize.js

On Wed, Jun 24, 2020 at 8:15 AM Roy Smith wrote: > > Oh, this is unexpected. When I do the change diffed below, I get: > > Subresource Integrity: The resource > 'https://tools-static.wmflabs.org/cdnjs/ajax/libs/twitter-bootstrap/4.3.1/css/bootstrap.min.css' > has an integrity attribute, but

Re: [Cloud] Need help with selectize.js

I wouldn't think you'd need any additional attributes. Just something like: https://tools-static.wmflabs.org/cdnjs/ajax/libs/twitter-bootstrap/4.3.1/css/bootstrap.min.css "> This is how I do it in my tools. ~ MA On Wed, Jun 24, 2020 at 10:15 AM Roy Smith wrote: > Oh, this is unexpected.

Re: [Cloud] Need help with selectize.js

Oh, this is unexpected. When I do the change diffed below, I get: > Subresource Integrity: The resource > 'https://tools-static.wmflabs.org/cdnjs/ajax/libs/twitter-bootstrap/4.3.1/css/bootstrap.min.css' > has an integrity attribute, but the resource requires the request to be CORS > enabled

Re: [Cloud] Need help with selectize.js

Thank you for reminding me that fixing this has been on my list for a while. My CSP-fu is weak. As I understand it, all I need do is: https://stackpath.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css; -

Re: [Cloud] Need help with selectize.js

> most if not all of the CSS and Javascript didn't load because of cross site scripting failures The Content Security Policy violations are report-only, if that's what you're referring to. Popper, Bootstrap, jQuery and Selectize are all available via https://cdnjs.toolforge.org/ which will get

Re: [Cloud] Need help with selectize.js

Hi, I clicked on the link, but most if not all of the CSS and Javascript didn't load because of cross site scripting failures. Maybe you should start there? Cheers, -Travis On Mon, Jun 22, 2020 at 7:01 PM Roy Smith wrote: > I'm mostly a python guy, who only dabbles in javascript when I can't

[Cloud] Need help with selectize.js

I'm mostly a python guy, who only dabbles in javascript when I can't avoid it :-) I've got a django-based tool (https://tools.wmflabs.org/spi-tools-dev/spi/ ) which uses selectize.js. For simple cases, everything works fine. But, if I click on